Skip to content

Commit ee57a94

Browse files
binding cookie edit
1 parent 46010d6 commit ee57a94

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

src/content/docs/cloudflare-one/identity/authorization-cookie/index.mdx

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -93,7 +93,7 @@ Do not enable HttpOnly if:
9393

9494
### Binding cookie
9595

96-
The binding cookie (`CF_Binding`) is an optional security cookie created when a user successfully authenticates. It binds the browser to the application’s `CF_Authorization` cookie, helping protect against session hijacking-style attacks. The binding cookie is shared with Cloudflare to verify identity, but it is stripped before reaching your origin. Because the origin never sees the binding cookie, this ensures the binding cookie cannot be exposed, logged, or stolen by application-layer vulnerabilities.
96+
The binding cookie (`CF_Binding`) is an optional security cookie created when a user successfully authenticates. It binds the browser to the application’s `CF_Authorization` cookie, helping protect against session hijacking-style attacks. The binding cookie is stripped before reaching your origin. Because the origin never sees the binding cookie, this ensures the binding cookie cannot be exposed, logged, or stolen by application-layer vulnerabilities.
9797

9898
If a request is missing the expected binding cookie, the associated `CF_Authorization` token is rejected, reinforcing session integrity and preventing unauthorized reuse.
9999

0 commit comments

Comments
 (0)