C＃中获取的HttpOnly饼干

问题描述

我怎样才能在一个httpwebresponse饼干的HttpOnly？
习惯性地我使用的CookieContainer来获取饼干在httpwebresponse，但它不具有的HttpOnly cookie的工作。

How can i get a httponly cookie in a httpwebresponse ?Habitually i use a CookieContainer to get the cookies in a httpwebresponse, but it doesnt work with httponly cookie.

是否有其他的方式来捕捉它们？

Is there an other way to catch them ?

推荐答案

是的，是的可能可检索的中HTTPOnly cookie的，为例如从使用InternetGetCookieEx功能。
必须使用的PInvoke 这样的代码：

Yes, it is possible to retrieve a HTTPOnly cookie, for instance from a client program using the "InternetGetCookieEx" function in the "Wininet.dll".You must use PInvoke code like this :

/// <summary>
/// WinInet.dll wrapper
/// </summary>
internal static class CookieReader
{
    /// <summary>
    /// Enables the retrieval of cookies that are marked as "HTTPOnly". 
    /// Do not use this flag if you expose a scriptable interface, 
    /// because this has security implications. It is imperative that 
    /// you use this flag only if you can guarantee that you will never 
    /// expose the cookie to third-party code by way of an 
    /// extensibility mechanism you provide. 
    /// Version:  Requires Internet Explorer 8.0 or later.
    /// </summary>
    private const int INTERNET_COOKIE_HTTPONLY = 0x00002000;

    [DllImport("wininet.dll", SetLastError = true)]
    private static extern bool InternetGetCookieEx(
        string url,
        string cookieName,
        StringBuilder cookieData,
        ref int size,
        int flags,
        IntPtr pReserved);

    /// <summary>
    /// Returns cookie contents as a string
    /// </summary>
    /// <param name="url"></param>
    /// <returns></returns>
    public static string GetCookie(string url)
    {
        int size = 512;
        StringBuilder sb = new StringBuilder(size);
        if (!InternetGetCookieEx(url, null, sb, ref size, INTERNET_COOKIE_HTTPONLY, IntPtr.Zero))
        {
            if (size < 0)
            {
                return null;
            }
            sb = new StringBuilder(size);
            if (!InternetGetCookieEx(url, null, sb, ref size, INTERNET_COOKIE_HTTPONLY, IntPtr.Zero))
            {
                return null;
            }
        }
        return sb.ToString();
    }
}

中的代码是从的。

我希望帮助！

这篇关于C＃中获取的HttpOnly饼干的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持！