Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



WebApp Sec: Re: Reviewing security parameters

Re: Reviewing security parameters

From: Jared <jared_at_geek-boy.com>
Date: Fri, 16 Apr 2004 17:34:29 -0400

On Apr 16, 2004, at 3:01 PM, V. Poddubniy wrote:

> Don't forget to set cookie as HttpOnly (this is useful at least for
> users of IE 6 SP1). This will tell browser not to tell on-page scrips
> (javascript, etc.) the cookie.

        how does one do this? I was under the impression that you could set a
cookie to only be sent via HTTPS/SSL, but not with any other
restrictions.

        Is this a feature that is unique to a particular web application
environment, i.e. ASP.Net, PHP, JSP?

cheers,

- Jared 

-- 
Happiness is a warm laptop.
Received on Apr 16 2004
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]