06-28-2023, 09:05 AM
Is your application installed to respond to some domain wide request, like https://yourcompany.com ??
If so, the cookie must be using the root application path, otherwise there is no way to use it to the main URL address... are you sure these auditors know what they are doing?
If so, the cookie must be using the root application path, otherwise there is no way to use it to the main URL address... are you sure these auditors know what they are doing?

