Comments on: CFID and CFToken are now httpOnly in CF 9.0.1 updater http://www.stillnetstudios.com/coldfusion-9-0-1-httponly-cookies/ Web development notes and commentary from Ryan Stille Wed, 01 Feb 2012 10:14:03 +0000 hourly 1 http://wordpress.org/?v=3.3 By: Ryan http://www.stillnetstudios.com/coldfusion-9-0-1-httponly-cookies/comment-page-1/#comment-1671 Ryan Sun, 05 Sep 2010 19:12:36 +0000 http://www.stillnetstudios.com/?p=898#comment-1671 No this is for CF 9 only. No this is for CF 9 only.

]]> By: Knut http://www.stillnetstudios.com/coldfusion-9-0-1-httponly-cookies/comment-page-1/#comment-1670 Knut Sun, 05 Sep 2010 14:07:26 +0000 http://www.stillnetstudios.com/?p=898#comment-1670 You wrote: ...“-Dcoldfusion.sessioncookie.httponly=true”... Does this also work in CF-8.0.1 ??? You wrote: …“-Dcoldfusion.sessioncookie.httponly=true”…

Does this also work in CF-8.0.1 ???

]]> By: Ryan http://www.stillnetstudios.com/coldfusion-9-0-1-httponly-cookies/comment-page-1/#comment-1546 Ryan Fri, 16 Jul 2010 18:27:18 +0000 http://www.stillnetstudios.com/?p=898#comment-1546 You are right John, you can specify httpOnly per-cookie using the CFCOOKIE tag now! You are right John, you can specify httpOnly per-cookie using the CFCOOKIE tag now!

]]> By: John Sieber http://www.stillnetstudios.com/coldfusion-9-0-1-httponly-cookies/comment-page-1/#comment-1545 John Sieber Fri, 16 Jul 2010 18:00:53 +0000 http://www.stillnetstudios.com/?p=898#comment-1545 I could be wrong, but I thought that I remembered reading that httpOnly attribute was added to the CFCOOKI tag in CF9. Thanks for the tip about adding httpOnly support for jSessionID's as well! I could be wrong, but I thought that I remembered reading that httpOnly attribute was added to the CFCOOKI tag in CF9. Thanks for the tip about adding httpOnly support for jSessionID's as well!

]]>