• Expand/CollapseMenu
Help
Reply

utag_main Cookie does not have HTTPOnly attribute.

utag_main Cookie does not have HTTPOnly attribute.

‎09-15-2017 09:05 AM

‎09-15-2017 09:05 AM
Rookie Contributor

Hailstorm scan complains that 'utag_main' does not have HTTPOnly attribute. Is there a way to fix this vulnerability? 

 

0 Kudos
Reply
2 REPLIES 2

utag_main Cookie does not have HTTPOnly attribute.

Re: utag_main Cookie does not have HTTPOnly attribute.

‎09-18-2017 04:34 AM

‎09-18-2017 04:34 AM
Tealium Employee
Hi @homerocavazos. This warning can be safely ignored. The HTTPOnly flag is only used for cookies set on the server-side, and it is not possible to set this flag when creating a cookie using JavaScript.

Since Tealium iQ is a client-side technology, we are setting the utag_main cookie using JavaScript. Therefore, it is not possible to set the HTTPOnly flag.
Check out our new Swift integration library for iOS, macOS, tvOS and watchOS: https://github.com/Tealium/tealium-swift with updated
documentation https://community.tealiumiq.com/t5/Swift/tkb-p/swift.
Reply

utag_main Cookie does not have HTTPOnly attribute.

Re: utag_main Cookie does not have HTTPOnly attribute.

‎09-18-2017 07:20 AM

‎09-18-2017 07:20 AM
Rookie Contributor

This confirms what I believed to be the case. 

Thanks.

0 Kudos
Reply

Copyright All Rights Reserved © 2008-2021