search

mozilla / http-observatory

Mozilla HTTP Observatory
https://observatory.mozilla.org/
Mozilla Public License 2.0
1.84k stars 168 forks source link

Set-cookie: HttpOnly flag seems to misinterpreted by Observatory checks #513

Open ArtM01 opened 11 months ago

ArtM01 commented 11 months ago

The Raw Server Headers are correctly shown but Observatory checks indicate the flag is missing.

Set-Cookie ASPSESSIONIDAUTAQTCS=; secure; path=/; HttpOnly

Can you please let me know if there is anything wrong with it?