Support Article
How to add Secure and HttpOnly attributes in the cookie
SA-4982
Summary
How to add Secure and HttpOnly attributes in the cookie for PRPC 6.3 SP1?
Resolution
- To add the Secure attribute in the cookie, see Page 98 (SetSecureCookie) of the Configuration Settings Reference Guide, https://pdn.pega.com/documents/configuration-settings-reference-guide-prpc-5x-prpc-62
Specify the following setting in the prconfig.xml file:
<env name="HTTP/SetSecureCookie" value="true" /> - To set cookies to HttpOnly, apply HFix-9206. Then specify the following setting in the prconfig.xml file:
<env name="cookie/HttpOnly" value="true" />
Published October 25, 2016 - Updated October 8, 2020
Have a question? Get answers now.
Visit the Collaboration Center to ask questions, engage in discussions, share ideas, and help others.