PDA

View Full Version : Switch Menu - "Missing Secure Attribute"



dvarner
03-07-2008, 05:27 PM
1) Script Title: Switch Menu

2) Script URL (on DD): http://www.dynamicdrive.com/dynamicindex1/switchmenu.htm

3) Describe problem: I'm running this script on my web site (www.keyhealthcaresolutions.com) and I love it. However, I run SSL and nightly ScanAlert scans to check for vulnerabilities. I'm receiving a level 1 report which I am 99% sure is because of the JavaScript - "Missing Secure Attribute in an Encrypted Session (SSL) Cookie."

It looks like I need to set the "secure attribute" for the cookie, and I cannot figure out how to do that. I tried to add "Secure" where it made sense (var cookievalue=(persisttype=="sitewide")? blockid+";path=/;Secure" : blockid), but that does not work.

Can I set the secure attribute, and how can I do that?