web.config 无效
<system.web>
<httpCookies httpOnlyCookies="true"/>
system.web>
设置 HttpOnly 有效
<rewrite>
<outboundRules>
<rule name="Add HttpOnly">
<match serverVariable="RESPONSE_Set_Cookie" pattern=".+" />
<conditions>
<add input="{R:0}" pattern="; HttpOnly" negate="true" />
conditions>
<action type="Rewrite" value="{R:0}; HttpOnly;" />
rule>
outboundRules>
rewrite>
如下设置 浏览器 cookie中没内容
<rewrite>
<outboundRules>
<rule name="Add HttpOnly">
<match serverVariable="RESPONSE_Set_Cookie" pattern=".+" />
<conditions>
<add input="{R:0}" pattern="; HttpOnly" negate="true" />
conditions>
<action type="Rewrite" value="{R:0}; HttpOnly" />
rule>
<rule name="Add Secure">
<match serverVariable="RESPONSE_Set_Cookie" pattern=".+" />
<conditions>
<add input="{R:0}" pattern="; Secure" negate="true" />
conditions>
<action type="Rewrite" value="{R:0}; Secure" />
rule>
outboundRules>
rewrite>
看网上 ,HttpOnly 有效但是Secure 无效 请教处理方法
https://www.coder.work/article/6687330
请问楼主解决了吗