Cookie without secure flag

[6年前 に Pankaj Kumar によって更新されました。]

Hi All,

Please tell me how we can make Liferay in build cookies secure.While scanning our application using security tool its show Liferay in build cookies are insecure e.g GUEST_LANGUAGE_ID.

Does Liferay provide any property to make these in build property secure.

Thanks & Regards,
Pankaj Semwal

[6年前 に Samuel Kong によって更新されました。]

Are you connecting to the server over HTTPS? Also, what version of Liferay Portal are you using?

[6年前 に Pankaj Kumar によって更新されました。]

Yes ,We are connecting server using https and using Liferay 6.2 EE version.

[6年前 に Samuel Kong によって更新されました。]

If you're connecting over https, the secure flag should be on the cookie. Since you're using an EE version, I recommend that you create a support ticket. The Liferay Support team is better equipped to handle issues with the EE version.