any idea to setup Cookie parameter 'HttpOnly' using angular

Question

I was trying to set parameters of the cookie using angular. I am able to set Expiration date and security parameter but not able to set the HttpOnly Parameter. I have set 'Expires' and 'Security' using angular cookie service i.e "cookie.service.d.ts" using below method

set(name: string, value: string, expires?: number | Date, path?: string, domain?: string, secure?: boolean, sameSite?: 'Lax' | 'Strict'): void;

I could not find how to set the HttpOnly parameter because angular cookie service does not contain such a parameter. any best way to set the HttpOnly parameter.

PFA..

Nithin Kumar Biliya · Accepted Answer · 2020-01-06 12:02:58Z

16

HttpOnly flag on a cookie implies that it can be set and accessed by the server side only. Client code will not have access to such cookies. Hence you will not be able to set this flag from the client side code like angular.

This is a security feature to prevent client side code (malicious code injected through XSS) from reading sensitive information stored in cookies.

Refer this issue and this answer for more info.

Also below is the text snippet from MDN. -

Cookies created via JavaScript cannot include the HttpOnly flag.

edited Jan 6, 2020 at 12:02

answered Jan 6, 2020 at 11:55

Nithin Kumar Biliya

3,0414 gold badges36 silver badges58 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

The Outstanding Question Asker Over a year ago

Nice response. However, can angular read that cookie?

Miroslav Ilyovski · Accepted Answer · 2021-11-13 20:08:25Z

3

HttpOnly cookies are not accessible from the client side, meaning you will not be able to read or set it.

You can use a regular cookie to store a authorization token like JWT which you can generate from the backend.

Angular treats all values as untrusted by default. When a value is inserted into the DOM from a template binding, or interpolation, Angular sanitizes and escapes untrusted values.

answered Nov 13, 2021 at 20:08

Miroslav Ilyovski

415 bronze badges

Collectives™ on Stack Overflow

any idea to setup Cookie parameter 'HttpOnly' using angular

2 Answers 2

1 Comment

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

1 Comment

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related