search

OrchardCMS / Orchard

Orchard is a free, open source, community-focused Content Management System built on the ASP.NET MVC platform.
https://orchardproject.net
BSD 3-Clause "New" or "Revised" License
2.38k stars 1.12k forks source link

Cookie "Orchard-" #8407

Open lbcsy opened 4 years ago

lbcsy commented 4 years ago

Hi,

I add to the Web.Config, and then all the cookies with Secure flag set except a cookie named "Orchard-", where does this one come from and why it can be not secured under this setting?

Thanks,

sebastienros commented 4 years ago

Maybe it's an authentication cookie, in which case it would be done here: https://github.com/OrchardCMS/Orchard/blob/dev/src/Orchard/Security/Providers/FormsAuthenticationService.cs