你即將離開本站

並前往https://blog.camel2243.com/2016/11/23/security-set-cookie-httponly-%EF%BC%8C%E9%81%BF%E5%85%8D-xss-%E6%94%BB%E6%93%8A%E6%99%82%E5%AD%98%E5%8F%96%E4%BD%A0%E7%9A%84-session-id/

[security] Set-Cookie: HttpOnly ，避免XSS 攻擊時存取你的 ...

vim /etc/apache2/conf-available/security.conf 若是apache 版本>=2.2.4. Header edit Set-Cookie ^(.*)$ $1;HttpOnly;Secure.

確定！ 回上一頁

查詢 「Security cookie」的人也找了：

  1. cookie httponly設定
    2.
  2. cookie httponly作用
    3.
  3. Cookie secure flag
    4.
  4. cookie secure設定
    5.
  5. set-cookie secure
    6.
  6. cookie domain設定
    7.
  7. cookie security: cookie not sent over ssl
    8.
  8. HttpOnly Cookie
    9.