<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Set Httponly tag for splunkweb_uid in Security</title>
    <link>https://community.splunk.com/t5/Security/Set-Httponly-tag-for-splunkweb-uid/m-p/760773#M18588</link>
    <description>&lt;P&gt;Hello,&lt;BR /&gt;have you found&amp;nbsp; a solution to this issue?&lt;BR /&gt;&lt;BR /&gt;I'm interested in the same topic.&lt;BR /&gt;Thank you,&lt;/P&gt;</description>
    <pubDate>Thu, 07 May 2026 12:55:21 GMT</pubDate>
    <dc:creator>OmarTabarelli</dc:creator>
    <dc:date>2026-05-07T12:55:21Z</dc:date>
    <item>
      <title>Set Httponly tag for splunkweb_uid</title>
      <link>https://community.splunk.com/t5/Security/Set-Httponly-tag-for-splunkweb-uid/m-p/543323#M12135</link>
      <description>&lt;P&gt;Referring to this&amp;nbsp; question (&lt;A href="https://community.splunk.com/t5/Archive/Not-all-Splunk-cookies-have-the-HttpOnly-tag-set/td-p/325150" target="_self"&gt;Not all Splunk cookies have the HttpOnly tag set&lt;/A&gt;&lt;A title=" Not all Splunk cookies have the HttpOnly tag set" href="https://community.splunk.com/t5/Archive/Not-all-Splunk-cookies-have-the-HttpOnly-tag-set/td-p/325150" target="_self"&gt;) ,&lt;/A&gt; answered by &lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/130916"&gt;@anaidu_splunk&lt;/a&gt; , I can see that some of the cookie couldn't be set with httponly tag due to it's usage on the scripting elements, so setting them as httponly would break the web interface functionality.&lt;BR /&gt;&lt;BR /&gt;I would like to get information on the &lt;STRONG&gt;splunkweb_uid &lt;/STRONG&gt;cookies that was also didn't have the httponly tag. Can someone help to verify that this cookie doesn't contain any secure information that could be exploit by third party. Below are the screenshot from my splunk portal with the cookies information for reference :-&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-center" image-alt="splunk httponly cookies splunkweb_uid.png" style="width: 999px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/13261i1FADA42C325F3A0F/image-size/large?v=v2&amp;amp;px=999" role="button" title="splunk httponly cookies splunkweb_uid.png" alt="splunk httponly cookies splunkweb_uid.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Thu, 11 Mar 2021 07:17:57 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Security/Set-Httponly-tag-for-splunkweb-uid/m-p/543323#M12135</guid>
      <dc:creator>Khairul_Irsyad</dc:creator>
      <dc:date>2021-03-11T07:17:57Z</dc:date>
    </item>
    <item>
      <title>Re: Set Httponly tag for splunkweb_uid</title>
      <link>https://community.splunk.com/t5/Security/Set-Httponly-tag-for-splunkweb-uid/m-p/760773#M18588</link>
      <description>&lt;P&gt;Hello,&lt;BR /&gt;have you found&amp;nbsp; a solution to this issue?&lt;BR /&gt;&lt;BR /&gt;I'm interested in the same topic.&lt;BR /&gt;Thank you,&lt;/P&gt;</description>
      <pubDate>Thu, 07 May 2026 12:55:21 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Security/Set-Httponly-tag-for-splunkweb-uid/m-p/760773#M18588</guid>
      <dc:creator>OmarTabarelli</dc:creator>
      <dc:date>2026-05-07T12:55:21Z</dc:date>
    </item>
  </channel>
</rss>

