CODEWITHSUNDEEP
asp.netcookies
SoftwareGeek
SoftwareGeek

Reputation: 15772

ASP.NET - Is it possible to block cookies declaratively in an aspx page?

can cookies be blocked using a page directive instead of doing it programmatic?

Upvotes: 1

Views: 421

Answers (4)

MatthewMartin
MatthewMartin

Reputation: 33143

I agree with thomas. If you are gunning for the session cookie, then disable session. The server will stop sending session cookies to the browser and the browser will stop returning them on subsequent requests.

http://support.microsoft.com/kb/306996

If you are trying to engage in industrial sabotage or some heavy handed security, i.e. treating all http requests with cookies as invalid requests, then 

if (Request.Cookies.Count > 0)
{
     throw new HttpException(
    "Keep your stinking cookies.  I accept request only browsers"+
    " configured to disable the sending of cookies.");
}

If you are trying to ignore cookies or to figure out why the app you maintain results in cookies (usually auth or some state managment), then search your source code for these and comment them out.

  • Request.Cookies, Requests.Cookies.Add()
  • Session (can still work with cookie-less sessions, where session Id is in the URL)
  • Membership (can still work with cookie-less sessions, where auth token is in the URL)

Upvotes: 1

Thomas
Thomas

Reputation: 64635

First, AFAIK, there is no way to do anything with respect to cookies declaratively other than force HttpsOnly or to choose cookieless Sessions. "Not accepting" makes no sense given how cookies work. Is it that you are trying to expire the existing cookies? If so, again, you must do this programatically.

Upvotes: 2

amelvin
amelvin

Reputation: 9051

After reading through the 43 separate page directive attributes I don't reckon that you can block cookies using a page directive (i.e. using the <%@ Page attribute="value" [attribute="value"...] %> syntax).

Upvotes: 0

Jesse Weigert
Jesse Weigert

Reputation: 4854

Why? If you don't want the cookies, just don't use them. You can't stop the browser from sending cookies to the server; but you can simply not use them.

Upvotes: 2

Related Questions