Questions tagged [cookies]
129 questions
2
votes
2 answers
.htaccess - Remove all cookies
I want to make an existing domain a "CDN" domain that serves all images, CSS and JS files (i.e. static files). However that domain was parked earlier and some application on that domain has set cookies.
As far as I can observe, I'd say that with…
![](../../users/profiles/1385.webp)
BlaM
- 3,816
- 5
- 26
- 27
2
votes
1 answer
Nginx preventing cookie from being sent from front to back end
I'm running a Golang back end on port 12345 and an Angular front end on port 8080. They communicate via websockets on a page called /consultation. When I open the firewall for both ports and have them communicate via their IP and port addresses,…
![](../../users/profiles/515827.webp)
nusantara
- 141
- 1
- 5
2
votes
0 answers
Cookies aren't being set/overwritten through nginx reverse proxy
For some reason, when I'm proxying my API request through an nginx reverse proxy, my cookies aren't being overwritten with the new values. I've tried adding the following to my nginx config, but I'm not seeing any changes. In this situation, I'm…
![](../../users/profiles/448399.webp)
robert.bo.roth
- 121
- 5
2
votes
0 answers
Cookie Secure Flag not persistent
I'm trying to implement a Secure flag for all cookies. I'm doing this via Headers.
Here's how I did it:
Header edit Set-Cookie (?i)^(.*)(;\s*secure)??((\s*;)?(.*)) "$1; Secure$3$4"
It successfully does its job on the first load. But on the…
![](../../users/profiles/334412.webp)
jarvis
- 1,956
- 4
- 17
- 31
2
votes
1 answer
Varnish - Allow specific cookies for the backend?
I am trying figure out how to allow the backend to see tracking cookies on specific registration pages but ignore them on others. Currently, I'm trying to use a custom header sent from the backend to set beresp.ttl = 0s; inside the vcl_fetch:
if…
![](../../users/profiles/212423.webp)
Taylor
- 21
- 2
2
votes
1 answer
PRUM_EPISODES cookie
We have noticed an unusual cookie in our logs:
PRUM_EPISODES=s=1379338025465&r=http%3A//www.example.com/demo.html
I presume it's a 3rd party control on our site which creates this. Does anyone know which one?
![](../../users/profiles/64433.webp)
Karl Glennon
- 161
- 13
2
votes
1 answer
GPO - Block 3rd party cookies for IE 8
I am trying to find some settings in GPOs that explicitly say, "Block 3rd Party cookies" in IE. I am looking under policies>admin template>windows components>IE> IE control panel>Security page. Should I look elsewhere for these? I don't really…
![](../../users/profiles/44865.webp)
Chadddada
- 1,670
- 1
- 19
- 26
2
votes
1 answer
how to check the value of a cookie in varnish
I have a cookie for language. I want to check if this cookie is set and to check its value to redirect the user to specific page.
the cookie name is Lang and its value might be En,Fr,or Ar
if (req.http.Cookie ~ "Lang"){
//now i want to check for…
![](../../users/profiles/56166.webp)
Alaa Alomari
- 638
- 5
- 18
- 37
2
votes
2 answers
Bad Request Due to "Bad" Cookie
I have a web site under a domain, where the main domain is using Google Analytics which sets a cookie named __utmva which is value is part binary.
As far as I can tell passing this cookie to IIS returns Bad Request (400) - "The request is badly…
![](../../users/profiles/10938.webp)
Shay Erlichmen
- 176
- 4
2
votes
0 answers
Vanilla .Net 4.0 website cannot identify some AppleWebKit based browsers
We are seeing some Safari browsers failing to cross-authenticate our website after we upgrade to .net 4.0 from .net 3.5.
After much investigation, it turns out to be a problem with ASP.Net identifying the Safari browsers properly. ASP.Net…
![](../../users/profiles/76353.webp)
Chad
- 21
- 1
2
votes
6 answers
How to cache websites using Varnish, PHP and Cookies
I consider starting using Varnish on my websites. I just tried out Varnish and I am wondering how to cache pages even if I my websites uses cookies, for Google Analytics. I am trying to remove them but it seems like Varnish isn't caching. This is…
![](../../users/profiles/58510.webp)
Erik
- 125
- 1
- 3
2
votes
1 answer
Does PHP *have* to serialize/unserialize session data between each HTTP request? Or is there a setting just to keep sessions in memory?
I think I understand why sessions are evil but for snappy client user experience I don't want to have to re-query the database on each HTTP request. (As a comparision, Java servlets can effortlessly keep tons of session objects in memory.)
Can PHP…
![](../../users/profiles/45758.webp)
Pete Alvin
- 281
- 2
- 4
- 12
1
vote
0 answers
Cookie Does Not Contain The secure and HTTPOnly Attribute
While running a Qualys Vulnerability Scan on a website which is being developed I got the following vulnerability:
Cookie Does Not Contain The "HTTPOnly" Attribute
Cookie Does Not Contain The "secure" Attribute
My application running in ExpressJS,…
![](../../users/profiles/479479.webp)
Krishan Kant Sharma
- 111
- 1
- 3
1
vote
1 answer
extract query string param value in RewriteRule
I'm writing an apache 2.4 Rewrite rule in order to remove a query string param and create a cookie from its value.
eg:
http://example.com/?param1=value1&my_param=my_value¶m2=value2
to
http://example.com/?param1=value1¶m2=value2
i'm…
![](../../users/profiles/392810.webp)
erwan
- 121
- 2
- 6
1
vote
1 answer
Information about securing cookies with path attribute with respect to ASP.NET and IIS
I need help with securing cookies for my web application. It's deployed in IIS and is built in ASP.NET MVC.
These are the things that I need to get more information about
Is the Sites folder in IIS Manager also a virtual directory ?
If Sites is…
![](../../users/profiles/420472.webp)
Akshay Raut
- 113
- 1
- 9