Is there a way to configure Lucee to insure that CFID/CFTOKEN cookies are generated as "HTTPOnly" and "Secure"? I've inherited multiple "legacy" CF apps that we are converting to Lucee - and our security/IA folks are hammering me all the time about these two insecure cookies...
--
Love Lucee? Become a supporter and be part of the Lucee project today! - http://lucee.org/supporters/become-a-supporter.html
---
You received this message because you are subscribed to the Google Groups "Lucee" group.
To unsubscribe from this group and stop receiving emails from it, send an email to lucee+un...@googlegroups.com.
To post to this group, send email to lu...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/lucee/dfd936e2-2255-4b96-aa46-dd66d5d3838f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
<cfset cookiest = {httponly='true', timeout=createTimeSpan(0, 0, 0, 10), secure='true',domain=".domain.com"}> <cfset cookieast = {timeout=createTimeSpan(0, 0, 00, 10)}> <cfapplication name="sessionCookies_appcfm_allSetting" sessionmanagement="Yes" sessiontimeout="#createTimeSpan(0,0,03,0)#" scriptprotect="all" sessioncookie=#cookiest# authcookie=#cookieast#>
--
Love Lucee? Become a supporter and be part of the Lucee project today! - http://lucee.org/supporters/become-a-supporter.html
---
You received this message because you are subscribed to a topic in the Google Groups "Lucee" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/lucee/f-HofCD_UeI/unsubscribe.
To unsubscribe from this group and all its topics, send an email to lucee+un...@googlegroups.com.
To post to this group, send email to lu...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/lucee/CAC_5Voq7E3nbJ5BS3JJhJ4jiPeUrENRUo7ikHDbF92y9H3omFw%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.
You received this message because you are subscribed to the Google Groups "Lucee" group.
To unsubscribe from this group and stop receiving emails from it, send an email to lucee+un...@googlegroups.com.
To post to this group, send email to lu...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/lucee/CAJ-%2Bs7uiB9j_P-iXrUTPONe8jpT%2B6GnvK_qd4ZV1SVxfQy1QUw%40mail.gmail.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/lucee/CAG1WijXHAsHyCUu0r8cxU7karABw6t9HPdU%3Dp%3D5Hx%3D3_VX9Zow%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.