Orchard icon indicating copy to clipboard operation
Orchard copied to clipboard

Cookie "Orchard-"

Open lbcsy opened this issue 4 years ago • 1 comments

Hi,

I add <httpCookies httpOnlyCookies="true" requireSSL="true" /> to the Web.Config, and then all the cookies with Secure flag set except a cookie named "Orchard-", where does this one come from and why it can be not secured under this setting?

Thanks,

lbcsy avatar Aug 13 '20 13:08 lbcsy

Maybe it's an authentication cookie, in which case it would be done here: https://github.com/OrchardCMS/Orchard/blob/dev/src/Orchard/Security/Providers/FormsAuthenticationService.cs

sebastienros avatar Aug 13 '20 17:08 sebastienros