How to set HttpOnly = true when using Wisej.Base.Cookie

0
0

To meet the security requirement of production environment, we need set HttpOnly = true for all cookies, but we cannot find the option HttpOnly for Wisej.Base.Cookie. It does have other required options such as Secure and SameSite. Is there any way to do that?

 

Thanks.

Tim

Questions
Share
  • You must to post comments
Filter
Sort by: Recently Active
0
0

Hi Tim,

JFYI we have updated our documentation covering HttpOnly cookies

https://docs.wisej.com/docs/concepts/security#httponly-cookies

Best regards
Frank

  • You must to post comments
0
0

Frank, thanks for the clarification. We have switched to HttpCookie to fully meet the requirement of security.

Happy New Year!

Regards

Tim

  • You must to post comments
0
0

Hi Tim,

this is not possible with the cookies managed through Wisej.NET because those are set using Javascript.
HttpOnly cookies can only be set/read using an http request/response.

They could be managed using ASP.NET cookies directly though. If you want us to evaluate this approach further please contact our Professional Services at SalesATwisej.com.

Best regards
Frank

  • You must to post comments
Showing 3 results
Your Answer

Please first to submit.