asp.net - HttpOnly and Secure flag testing -
i have set following under web.config in app
<system.web> <httpcookies httponlycookies="true" requiressl="true" lockitem="true" /> <authentication mode="forms"> <forms name="testweb" loginurl="~/login.aspx" defaulturl="~/default.aspx" requiressl="true" slidingexpiration="true" enablecrossappredirects="false" cookieless="usecookies" /> </authentication> </system.web>
and want ensure configuration right. what's easiest way test both http , secure flag working properly?
thanks
your configuration correct if want check whether cookies set both httponly , secure can use either developer tools in ie or firebug add-on in firefox.
firefox: add plugin firebug here, run , head on cookies section whenever request webpage provide cookie information.
internet explorer: clicking f12 brings developer tools in ie investigating cookies littile tricky here.
- open developer tools ie.
- go network tab
- click start capturing , navigate website.
- double click on url interested in detailed view.
- again going cookies tab in detail view tell how cookie received web server. make sure cookie direction received.
Comments
Post a Comment