-
-
Save kenshin17/20c35c4023de83f971de9a9e1cd0b812 to your computer and use it in GitHub Desktop.
Set all cookies set in the HTTP response to HttpOnly
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
acl httponly_cookie res.hdr(Set-Cookie),lower -m sub httponly | |
rspirep ^(set-cookie:.*) \1;\ HttpOnly if !httponly_cookie |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment