httponly cookie

[NPI_Chris]

Hello all,

We are trying to add aditional security to a web based system thats being run by labview.  We run on gweb as a server and use labview to create server side cookies.  We would like to impliment microsoft httponly cookie format.  Does anyone know if this is possible?  the only examples we have found to do this have been for other scripting languages, it appears it may be as simple as adding info to the header of the cookie, but we can not tell for sure if that is the case, and if so if it is possible to add that info using the LV cookie vi's?

Any help or if someone has implimented it and could send a sample vi it would be greatly appreciated. (btw we are using LV 8.6)

Chris

CLAD

[A_Patel]

Hi Chris,

It looks like you may want to take a look at the Internet Toolkit to see if it will do what you want.

http://sine.ni.com/nips/cds/view/p/lang/en/nid/2501

You can find an evaluation copy here:

https://lumen.ni.com/nicif/us/evaltlktrepgen/content.xhtml

Flash

[NPI_Chris]

That is what we are using now, and there doesnt seem to be any way to change the type of cookie.  is there someplace where the header information can be modified using one of the cookie vi's?

[A_Patel · Accepted solution]

Hi Chris,

There is no input to change the type of cookie, however you will be able to change the header information by digging into theCreat Cookie.vi. Double click the sub-VI and you can modify it.

Flash

[NPI_Chris]

thank you for the information, would you be able to send a screen shot or the Vi with the header creation marked for us...we dug into some of the cookie VI's already and were not completely sure of what was happening inside them all..

again thanks!

Chris

[A_Patel]

Hi Chris,

So after taking a closer look at the VI, it looks like you will have to build the Cookie yourself.

Flash