httpOnly cookie

[horllste]

hello, this is a question and not a issue.

i will like to know if there is a way to bypass web app with httpOnly cookie set to true.

thanks

[Giuseppe Trotta]

Yes, use the replacement rules to strip the httpOnly flag when a cookie is set.
https://github.com/muraenateam/muraena/blob/master/config/config.toml#L62