http://www.nserver.co.kr/?mod=document&uid=19&page_id=157



세션쿠키에서 httpOnly 속성누락

Secure cookie with HttpOnly and Secure flag in Apache

아래 mod 가 활성화 되어 있어야 한다.
[root@ conf]# cat httpd.conf |grep mod_headers.so
LoadModule headers_module modules/mod_headers.so

httpd.conf 아래와 같이 추가한다.
[root@conf]# cat httpd.conf |grep Header
Header edit Set-Cookie ^(.*)$ $1;HttpOnly;Secure

적용전

적용후

check http://geekflare.com/tools/tool.php?id=check-headers

KW3C 2.0


K-WAH4.4







<div id="skipnavigation">

<ul id="accessibility2">

<li><a href="#topmenu">주메뉴로 바로가기</a></li>

</ul>

</div>


#skipnavigation{z-index:9999;position:absolute;left:0;top:0}

#skipnavigation *{list-style:none;margin:0;padding:0;}

#skipnavigation a{display:block;width:1px;height:1px;overflow:hidden;color:#000;white-space:nowrap;}

#skipnavigation a:focus,

#skipnavigation a:active{width:128px;height:auto;background:#ffd;}



+ Recent posts