HttpOnly Attribute Not Set to True

[Anonymous]

During security scanning of our PowerBI App, we found that multiple cookies HttpOnly attribute are still set to False within https://app.powerbi.com.  Is there a way to make sure or set them all to True?

Sample cookies:

ClusterUri

ai_session

ai_user

PowerBISignedInFlag

PreferredLanguage

[zikoum]

Hello,
I am interested to know if there is a solution for Power BI Server 2017?mainly for ai_session
Best regards,
Mohamed

[v-lionel-msft]

Hi @Anonymous ,

It's impossible to achieve the idea in current version(Service version13.0.13322.215).

But you don't need to worry about its security. As a service deployed on the Azure,  its security is officially guaranteed by Microsoft.

Best regards,
Lionel Chen

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.