HttpOnly cookies in .NET 2.0
This is a well known trick that I just wanted to share as it is so crucial in preventing effective XSS attacks in Internet Explorer (and hopefully soon FireFox).
Anyway, the method is simple, whack this under the <system.web> section of your web.config file:
<httpCookies httpOnlyCookies="true" requireSSL="false" domain="" />Tada!
HttpOnly cookies in .NET 2.0 was originally published by Martin Paul Eve at eve.gd: Martin Paul Eve on June 26, 2007.
Files
10.59348_75sxs-sqj29.pdf
Files
(106.2 kB)
| Name | Size | Download all |
|---|---|---|
|
md5:7ed268a6b0cc021a42aa9ff008f943b1
|
106.2 kB | Preview Download |
Additional details
Description
This is a well known trick that I just wanted to share as it is so crucial in preventing effective XSS attacks in Internet Explorer (and hopefully soon FireFox). Anyway, the method is simple, whack this under the section of your web.config file: Tada! HttpOnly cookies in .NET 2.0 was originally published by Martin Paul Eve at eve.gd: Martin Paul Eve on June 26, 2007.
Identifiers
- GUID
- https://doi.org/10.59348/75sxs-sqj29
- URL
- https://eve.gd/2007/06/26/httponly-cookies-in-net-2-0/
Dates
- Issued
-
2007-06-26T00:00:00Z
- Updated
-
2007-06-26T15:24:31Z