Answer the question
In order to leave comments, you need to log in
How to remove s: from express-session session ID cookie?
For security purposes, express-session
there is a setting name
that allows you to change the cookie name in order to make it harder for an attacker to identify the source of a potential vulnerability (in this case, Express). But what is the point in these manipulations, if this express-session
one shoves cookies at the beginning s:
(apparently to simplify subsequent parsing).
Is there an option to overwrite this? I tried to generate my IDs. IDs are generated, but s:
are still inserted at the beginning.
Answer the question
In order to leave comments, you need to log in
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question