asp.net - HttpOnly and Secure flag testing -


i have set following under web.config in app

<system.web>     <httpcookies httponlycookies="true" requiressl="true" lockitem="true" />     <authentication mode="forms">       <forms name="testweb" loginurl="~/login.aspx" defaulturl="~/default.aspx"               requiressl="true" slidingexpiration="true" enablecrossappredirects="false" cookieless="usecookies" />     </authentication> </system.web> 

and want ensure configuration right. what's easiest way test both http , secure flag working properly?

thanks

your configuration correct if want check whether cookies set both httponly , secure can use either developer tools in ie or firebug add-on in firefox.

firefox: add plugin firebug here, run , head on cookies section whenever request webpage provide cookie information.

internet explorer: clicking f12 brings developer tools in ie investigating cookies littile tricky here.

  1. open developer tools ie.
  2. go network tab
  3. click start capturing , navigate website.
  4. double click on url interested in detailed view.
  5. again going cookies tab in detail view tell how cookie received web server. make sure cookie direction received.

Comments

Popular posts from this blog

c# - DetailsView in ASP.Net - How to add another column on the side/add a control in each row? -

javascript - firefox memory leak -

Trying to import CSV file to a SQL Server database using asp.net and c# - can't find what I'm missing -