david smith thomaz
david smith thomaz

Reputation: 21

How to set HTTPONLY and SECURE security flags in cookies that are automatically generated in Angular

when we enter the site in angular, we can observe that some cookies are generated automatically.

Example Cookies ...

rxvt rxVisitor dtPC dtLatC dtSa dtCookie

But they start without the httponly and secure security flags

How do I make these cookies have these flags?

Upvotes: 2

Views: 612

Answers (1)

martin.malek
martin.malek

Reputation: 2218

These cookies are not from Angular but from Dynatrace. Particularly they are from Dynatrace RUM which uses these cookies to correlate user actions with backend metrics. As this happens in browser, it needs to be able to read the cookies in javascript. It's possible to set secure flag in dynatrace settings, but if you will do so, you will loose any tracking happening on HTTP. So if there is any address on HTTP you might loose some data.

Upvotes: 0

Related Questions