69
Views
5
Comments
Set-Cookie: ASP.NET_SessionId is appearing twice in http response header in FireFox
Application Type
Traditional Web
Service Studio Version
11.14.16 (Build 60354)

I am facing an issue where Set-Cookie:ASP.NET_SessionId is appearing twice in HTTP header response along with osVisitor & osVisit cookies in Firefox Browser for the traditional Web App.

 Below Are the steps to reproduce the issue :

1. Create a Traditional Web Application.

2.  Create a single page with Registered Role in new created application. 

3.  Run the application in Firefox Browser, you will re-direct to login screen.

4.  Login in using your OutSystems creds.

5.  After login, access the newly created page.

6.  Inspect the page Firefox browser and navigate to Network Tab. 

7.  You can see the page request in Network tab and in the Header section of that request, we can find the Response Headers and see Twice cookies are showing.  

This issue is happening in my all OutSystems environments from personal to production. 

Please help me understand why this is happening and how to solve this issue so that only single cookie will create.


2022-08-03 04-32-50
Ravi Punjwani

Hi Shailendra,

This seems interesting.

  • Is this working correctly in other browsers?
  • After you receive the response in Firefox, what is the behaviour in the cookies storage area in your browser? I'm assuming it should be showing only one on cookies list.
  • How is it negatively impacting your application in any manner?
  • Is it the same in all environments?
  • Would you be able to post the application URL?
UserImage.jpg
Shailendra Shrivastava

Hi Ravi,

Please find may response inline -

  1. Is this working correctly in other browsers? - Yes, its working correctly in other browsers but in the Firefox and in postman , twice cookies are showing.
  2. After you receive the response in Firefox, what is the behaviour in the cookies storage area in your browser? I'm assuming it should be showing only one on cookies list. Yes, only one cookie is showing in the cookies list but when we are applying secure cookie attribute from the server so secure attribute is not showing on the cookies in Firefox but in the other browsers secure attribute is showing. This is happing due to twice cookies and this is a actual problem.
  3. How is it negatively impacting your application in any manner? NO
  4. Is it the same in all environments? Yes
  5. Would you be able to post the application URL? -  https://shailendras.outsystemscloud.com/TraditionalWebApp/Home.aspx
2022-08-03 04-32-50
Ravi Punjwani

As I visited that URL, the request to Home.aspx returns with the same response (cookies showing twice in the response). But this is same behaviour in Chrome as well, not just Firefox.

Is it any different for you when you're using Chrome?

Do you have HTTPS configured already?

2025-04-17 05-42-16
Ajit Kurane

Hi Shailendra,

can you please look into the below document...There is description of same issue. I hope you will get hint from it.

https://github.com/gobuffalo/buffalo/issues/2112

Thanks,

Ajit Kurane

UserImage.jpg
marco vranken

We had the same problem and solved it by configuring a setting in IIS.

IIS > edit default website > at the right-hand side > Configure HSTS > set max-age different from 0 e.g 86400 


Community GuidelinesBe kind and respectful, give credit to the original source of content, and search for duplicates before posting.