ASP session Cookie in the lack of HttpOnly attribute and secure attribute this low latent loophole h-CodePudding

With a piece of code Response. AddHeader "Set - the Cookie", "sessionname=val; Domain=.163.com; Expires=Wed, 11 - Oct - 2017 03:45:43 GMT; Path=/; Secure; Httponly "or can sweep out

CodePudding user response:

cookies how to how to set up in the picture

CodePudding user response:

Response. AddHeader "Set - the Cookie", "mycookie=yukio okamoto,; HttpOnly "

Try this this can explain the above you have syntax errors

Cookies at least you do not set the top-level domain names and domain name also set wrong 'you can't set to 163. com'

CodePudding user response:

His definition of cookies can be set up, in view of the how to set up a program generated, the cookies are automatically generated in the graph,