Enforce strict security of session cookies
Use the glide.ui.secure_cookies property to require properly formatted cookies
If glide.ui.secure_cookies isn't set to the recommended value of true, then additional cookie security and strict cookie validation isn't performed.
Ensure that the property glide.ui.secure_cookies is set to true.
Warning: This is a safe harbor property, meaning the value can't be altered once it's changed. It is non-revertible.
More information
| Attribute | Description |
|---|---|
| Configuration name | glide.ui.secure_cookies |
| Configuration type | System Properties \(/sys\_properties\_list.do\) |
| Data type | Boolean |
| Recommended value | true |
| Default value | <none> |
| Fallback value | true |
| Category | Validation, sanitization, and encoding |
| Security risk | - Severity score: 7.1 - CVSS rating: High - Security risk details: This could allow an attacker to bypass cookie validation leading to unauthorized resource access. |
| Functional impact | When the property is set to true, improperly formatted cookies are rejected. When such a cookie is rejected, the user must login again. |
| Dependencies and prerequisites | None |
Parent Topic:Validation, sanitization, and encoding