Forum Discussion

Anonymous's avatar
Anonymous
Not applicable
6 years ago

HttpOnly Attribute Not Set to True

During security scanning of our PowerBI App, we found that multiple cookies HttpOnly attribute are still set to False within https://app.powerbi.com.  Is there a way to make sure or set them all to True?

 

Sample cookies:

ClusterUri

ai_session

ai_user

PowerBISignedInFlag

PreferredLanguage

 

Need Help

3 Replies

  • v-lionel-msft's avatar
    v-lionel-msft
    Community Support
    6 years ago

    Hi Anonymous ,

     

    It's impossible to achieve the idea in current version(Service version13.0.13322.215).

    But you don't need to worry about its security. As a service deployed on the Azure,  its security is officially guaranteed by Microsoft.

     

    Best regards,
    Lionel Chen

    If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

  • zikoum's avatar
    zikoum
    New Member
    5 years ago

    Hello,
    I am interested to know if there is a solution for Power BI Server 2017?mainly for ai_session
    Best regards,
    Mohamed

  • DoganErarslan's avatar
    DoganErarslan
    New Member
    2 years ago

    Hello,

    This problem continues for me too. Did you find a solution?

     

     

    Best Regards