I have to set 'httponly' attribute for SMIDENTITY, SMSESSION ,MAIL, XXX_PERSIST Cookies for security reasons.
These cookies are auto generated as we didnt add any cookie in our application .
I tried to set httponly attribute using lines below
<httpCookies httpOnlyCookies="true" /> but it didn't work out. We are using single sign on for our application.
for eg:
enter image description here
I want to set httponly attribute for all above cookies nt only for sessionid.do i need to configure properties at iis level for cookies?
Go to the complete details ...