Cookie属性HttpOnly使用示例

👤 dnawo 📅 2014-11-26 👁 4581 👍 0 💬 0 🔄 来源：本站原创

今天用document.cookie获取某宝cookie时发现总是丢了几个值，于是观察研究丢失的这几个值有什么不同，最终知道Cookie有个属性HttpOnly，用于指定Cookie是否可通过客户端脚本访问[1]，便写了一个示例验证下：

Test.ashx：

//cookie1
HttpCookie cookie1 = new HttpCookie("cookie1", "www.mzwu.com");
context.Response.Cookies.Add(cookie1);
//cookie2
HttpCookie cookie2 = new HttpCookie("cookie2", "www.baidu.com");
cookie2.HttpOnly = true;
context.Response.Cookies.Add(cookie2);
//cookie3
HttpCookie cookie3 = new HttpCookie("cookie3", "www.google.com");
cookie3.Expires = DateTime.Today.AddDays(1);
context.Response.Cookies.Add(cookie3);