Rich-text Reply

Can Optimizley Targeting use HttpOnly Cookies?

bbirschbach 01-27-15
Accepted Solution

Can Optimizley Targeting use HttpOnly Cookies?

If we have a targetting rule baesd on a cookie, but the cookie is HttpOnly, will that targeting rule be able to see that the cookie exists and read its value?  My gut says no, since HttpOnly cookies are not visible to JavaScript, but perhaps Optimizely is doing some magic that's not immediately obvious.

Brian_Abad 01-27-15
 

Re: Can Optimizley Targeting use HttpOnly Cookies?

Thanks for your question!

You are correct, Optimizely isn't able to use HttpOnly cookies. The cookie will have to chance functionality to not have that specification or find an alternative route to target the experiment.

Let us know if we can help with anything else!
---
Brian Abad
Manager, Technical Support
Customer Success
Optimizely
bbirschbach 02-02-15
 

Re: Can Optimizley Targeting use HttpOnly Cookies?

Thank you for the confirmation @Brian_Abad