---
title: Prevent Unauthorized Used Of Session ID
description: "**Impact area** Security **Severity** Medium **Affected element** Org Config ## Rule ID **SF-0169** ## Impact Allowing code access the Session ID cookie increases the vulnerability to session hijacking attacks. ## Remediation Enable this setting. From Setup, enter \"Session Settings\" in…"
url: "https://community-staging.qualityclouds.com/qcdocs/qc/salesforce-rules/prevent-unauthorized-used-of-session-id/"
updated: "2025-03-21"
category: Rules
---

# Prevent Unauthorized Used Of Session ID

**Impact area**

Security

**Severity**

Medium

**Affected element**

Org Config

## Rule ID

**SF-0169**

## Impact

Allowing code access the Session ID cookie increases the vulnerability to session hijacking attacks.

## Remediation

Enable this setting. From Setup, enter "Session Settings" in the Quick Find box, then select Session Settings. Then enable "Require HttpOnly attribute".

### Time to fix

30 min

## References

This rule is linked to [Common Weakness Enumeration CWE-284 Improper Access Control](https://cwe.mitre.org/data/definitions/284.html).