python (12.9k questions)
javascript (9.2k questions)
reactjs (4.7k questions)
java (4.2k questions)
java (4.2k questions)
c# (3.5k questions)
c# (3.5k questions)
html (3.3k questions)
How to perform httpOnly cookie authentication via proxies?
I have client on localhost on port 8080 lets call it A. I have a backend API on localhost on port 3002 lets call it C. A doesn't connect to C directly, but via a secure tunnel with HTTPS, lets call it...
Raz Buchnik
Votes: 0
Answers: 0
setcookie(): Passing null to parameter #7 ($httponly) of type bool is deprecated
public function csrf_set_cookie()
{
$expire = time() + $this->_csrf_expire;
$secure_cookie = (bool) config_item('cookie_secure');
if ($secure_cookie && ! is_https())
{
...
Sharif Ashik Ishtiak
Votes: 0
Answers: 1
Rails API + React Frontend - how to make CSRF cookie NOT httponly?
I have a Rails 6 API and a React frontend and I would like to keep verify_authenticity_token on all controller actions.
Backend sets CSRF token as follows in application_controller.rb:
class Applicati...
Aaron Parisi
Votes: 0
Answers: 0