Cookies & security

Hi everyone, I have a new security requirement for our organization and would appreciate any insights on how to define it in Cloudflare: 1.Prevent access to cookies via JavaScript. 2.Enable CSRF protection based on the SameSite cookie attribute, with the option to use either the "Strict" or "Lax" value. More information can be found here: OWASP. Thank you in advance for your help!
2 Replies
Rowin
Rowin6mo ago
Enable HttpOnly and SameSite on the cookies your application sets. This has nothing to do with Cloudflare.
SI
SIOP6mo ago
Thanks !!

Did you find this page helpful?