Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [cookies]

132 questions
1
vote
1 answer

extract query string param value in RewriteRule

I'm writing an apache 2.4 Rewrite rule in order to remove a query string param and create a cookie from its value. eg: http://example.com/?param1=value1&my_param=my_value¶m2=value2 to http://example.com/?param1=value1¶m2=value2 i'm…
erwan
  • 121
  • 1
  • 2
  • 6
1
vote
1 answer

Information about securing cookies with path attribute with respect to ASP.NET and IIS

I need help with securing cookies for my web application. It's deployed in IIS and is built in ASP.NET MVC. These are the things that I need to get more information about Is the Sites folder in IIS Manager also a virtual directory ? If Sites is…
Akshay Raut
  • 113
  • 2
  • 9
1
vote
0 answers

NGINX stripping domain in Set-Cookie header

Problem: domains are stripped from the set-cookie header. httpoonly, expires, and path are all correct. My location block: location ~* ^/path { proxy_pass http://nodeserver; # this is an upstream running in another container proxy_set_header…
Zac Anger
  • 143
  • 7
1
vote
1 answer

Failed to using powershell to get cookies

I am writing a powershell script to mimic a login process,and then catch data from web pages. I failed at the very begainning, I can't get into the login pages at all after I set up cookies. Here is the script I wrote: First, get the…
pansal
  • 269
  • 3
  • 9
  • 20
1
vote
0 answers

400 bad request on nginx proxy to tomcat but not on static content

We have been running into an issue when our cookies reach a certain size (over 7k) where nginx is returning 400 Bad Request with an empty response when proxying to our tomcat. This doesn't happen when nginx is serving the static content however. We…
cnaut
  • 11
  • 3
1
vote
1 answer

stickysession not work fine in apache and two Glassfish Instances

I have two application that run in two Glassfish Instances, i configure my apache to use sticky session like so : ProxyPass / balancer://Appcluster/ stickysession=JSESSIONID But this not work 100% correct, it change some times the instance when the…
Youcef LAIDANI
  • 111
  • 7
1
vote
1 answer

How does the zScaler cookie authentication work?

I'm implementing a web filter for my organization and I'm considering zScaler. I do not want to use proxy PAC file. I just got off the phone with zScaler's sales and they claim that they can differentiate my users post-NAT using cookies. They did…
NAScar0
  • 13
  • 1
  • 3
1
vote
0 answers

pass cookie from http response via nginx reverse proxy

I have a problem with passing my cookie when I'm running an nginx as a proxy (in a docker container). Here is my configuration of my nginx proxy: location /test { proxy_pass http://test-backend:8080; proxy_set_header…
andreaspfr
  • 203
  • 1
  • 3
  • 7
1
vote
0 answers

Server can't parse cookie

I noticed the following messages in my TJWS log. [Mon Oct 03 21:28:28 EDT 2016] TJWS: An exception in parsing cookies: id=die(pi());; user=assert java.lang.IllegalArgumentException: Cookie name "; user" is a reserved token at…
Vit Stern
  • 11
  • 1
1
vote
0 answers

Reverse Proxy Nginx but cookies don't get through for WP admin

I reverse proxy a blog. It's hosted on Apache under a subdomain blog.example.com. In Nginx I have the following config in a server block. Everthing works except the cookies for the WP Admin panel don't get passed through so I can't login in. What…
commandantp
  • 109
  • 3
1
vote
1 answer

SecureCookies, HTTPOnly cookies, .Net, and SSL offloading

So I've been looking into implementing HttpOnly and SecureCookies in my web environment. I have an F5 as the load balancer and a couple of C# web applications hosted in iis 7.5 for the website. The .net applications are an old asp.net legacy…
user1079703
  • 111
  • 1
  • 3
1
vote
1 answer

modsecurity whitelisting certian types of cookies

I am seeing cookies being generated on our server which appear to be from 3rd party objects in the site and don't show themselves when one logs in or navigates through the site. The cookies are random but all start with Wm. So some of them might be…
LUser
  • 217
  • 1
  • 6
  • 15
1
vote
1 answer

IIS7 Multiple Websites Same Port

I am trying to set up an internal-only web server of our production websites for QA and development testing. There is no need or intention to access this dev site from outside of the corporate network. In production mode, the website is configured…
K0D4
  • 123
  • 5
1
vote
1 answer

Apache CookieTracking, what's the spec for the access log entry of the cookie?

Let's say my apache config contains the following CookieTracking on CookieName userfault CookieDomain userfault.com LogFormat "%{userfault}C" userfaultlog CustomLog /var/log/userfault.com/access.log userfaultlog I see that the log then contains…
Pieter
  • 1,409
  • 3
  • 12
  • 9
1
vote
2 answers

Internet Explorer ignoring PHP setcookie() from CentOS server

In the past we used a windows XAMPP server for an internal website. It worked fine but had some intermittent issues and we decided to move to a LAMP server on CentOS. We made the switch today but it turns out Internet Explorer ignores every attempt…
Hussein Sabbagh
  • 39
  • 7
1 2 3
…
8 9