Search code examples
javascriptcookieshttponlycookie-httponly

Internet Explorer 11 is Not Submitting HTTPOnly Cookies

So I'm working with an application that sends back an ID for the browser to use in future XHRs in an httponly cookie.

However, in future requests to the server, this cookie is not being submitted in IE11 on Windows 7. This works in Opera, Chrome, Firefox, and Edge.

Here's the initial request and the cookie supposedly being set.

  • I've made sure that the withCredentials property on the XHR is set to true in accordance with MDN.
  • Tried with Protected Mode both on and off.
  • Lowered security to the lowest settings in Internet Options.
  • Made sure that the server I'm working with does not have an underscore.
  • Made sure CORS is working and it looks like it is

Any help on this would be great! I'm totally stuck.

Solution

  • I found the answer!

    Make sure that the Privacy Settings in the Internet Options accepts third party cookies! You can do this by either making sure the Privacy Settings are at a setting lower than medium or manually accepting first- and third-party cookies in the Advanced Settings.