H
H
hckn2018-09-15 03:50:19
Express.js
hckn, 2018-09-15 03:50:19

How to remove s: from express-session session ID cookie?

For security purposes, express-sessionthere is a setting namethat allows you to change the cookie name in order to make it harder for an attacker to identify the source of a potential vulnerability (in this case, Express). But what is the point in these manipulations, if this express-sessionone shoves cookies at the beginning s:(apparently to simplify subsequent parsing).
Is there an option to overwrite this? I tried to generate my IDs. IDs are generated, but s:are still inserted at the beginning.

Answer the question

In order to leave comments, you need to log in

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question