通过配置出站规则getcookie添加HttpOnly

在网站根目录下找到文件“Web.config”，在其中添加如下出站规则：

<rewrite> 

    <outboundRules> 

        <rule name="Add HttpOnly"> 

            <match serverVariable="RESPONSE_Set_Cookie" pattern=".*" /> 

            <conditions> 

                <add input="{R:0}" pattern="; HttpOnly" negate="true" /> 

            </conditions> 

            <action type="Rewrite" value="{R:0}; HttpOnly" /> 

        </rule> 

        <rule name="Add Secure"> 

            <match serverVariable="RESPONSE_Set_Cookie" pattern=".*" /> 

            <conditions> 

                <add input="{R:0}" pattern="; Secure" negate="true" /> 

            </conditions> 

            <action type="Rewrite" value="{R:0}; Secure" /> 

        </rule> 

    </outboundRules> 

</rewrite> 

添加完成后图示

测试结果

搞定！