Enforce strict security of session cookies

  • Release version: Australia
  • Updated March 12, 2026
  • 1 minute to read

    • Use the glide.ui.secure_cookies property to require properly formatted cookies

    If glide.ui.secure_cookies isn't set to the recommended value of true, then additional cookie security and strict cookie validation isn't performed.

    Ensure that the property glide.ui.secure_cookies is set to true.

    Warning:
    This is a safe harbor property, meaning the value can't be altered once it's changed. It is non-revertible.

    More information

    Attribute Description
    Configuration name glide.ui.secure_cookies
    Configuration type System Properties (/sys_properties_list.do)
    Data type Boolean
    Recommended value true
    Default value <none>
    Fallback value true
    Category Validation, sanitization, and encoding
    Security risk
    • Severity score: 7.1
    • CVSS rating: High
    • Security risk details: This could allow an attacker to bypass cookie validation leading to unauthorized resource access.
    Functional impact When the property is set to true, improperly formatted cookies are rejected. When such a cookie is rejected, the user must login again.
    Dependencies and prerequisites None