Skip to Main Content

Session Cookie(s) Not Marked as Secure

Hi,
Our application based on Oracle forms 12.2.1.3 and weblogic 12.2.1.3.
we have OHS setup and we are accessing appliation using http://myapp.net:7777/forms/frmservlet?config=myloginscreen This is a load balancer and we have 4 individual nodes. Our security team noted that "Session Cookie(s) Not Marked as Secure. If a secure flag is checked, it does not allow HTTP traffic, and data is encrypted with https. "

I tried to update following code at http.conf file, but it affected my application to launch and I was unable to launch application.
<IfModule mod_headers.c>
Header edit Set-Cookie ^(.*)$ $1; Secure;
</IfModule>

Help me to setup correct value for secure the Cookie(s) .

Comments