Tag Archives: cookies

Setting secure attribute of JSESSIONID cookie in ColdFusion 8

As part of PCI compliance our servers were run through third party security auditing and one warning we received was “Missing Secure Attribute in an Encrypted Session (SSL) Cookie”. This warning referred to the JSESSIONID cookie being set in our SSL enabled pages not having the SECURE attribute set. In ColdFusion there is no way [...]

Posted in ColdFusion, Security | Also tagged , , | Leave a comment