how to block a cookie in response header in cloudflare?
A random session value is present for this cookie.
I am trying it using Transform rules but not successful yet.
7 Replies
block? like removing a specific set-cookie value?
Hi yes
I am able to achieve this now
(not http.request.full_uri contains "https://domain.com/login.php" and http.request.full_uri wildcard r"https://domain.com/*")
Remove Cookie name
its in Transform rules
break that down and go simpler
then you can use account level "Trace" tool: https://dash.cloudflare.com/?to=/:account/trace/search, make sure it matches
Thank you for the information. I also would want to make exception for say business.domain.com/*
The login php is also an exception so i have not equal to php full path in my solution above.
then you would set up that expression shown above, and then click "Or" and "Hostname eq business.domain.com"
so you'd have two blocks: (hostname eq domain.com and path is /login.php, OR hostname is business.domain.com)
hostnames do not contain protocols, paths, or anything else, simple to match on, and matches all traffic to the hostname
That seems 👍 great
I will test it out soon