Try this:
when HTTP_RESPONSE {
if { $iframeurl != 1 } { HTTP::header replace "X-Frame-Options" "SAMEORIGIN" }
HTTP::header replace "X-Frame-Options" "SAMEORIGIN"
set myValues [HTTP::cookie names]
foreach mycookies $myValues {
log local0. "Cookie Name: $mycookies being secured."
if { [HTTP::cookie version $mycookies] != 1 } {
set ckval [HTTP::cookie value $mycookies]
set ckpath [HTTP::cookie path $mycookies]
HTTP::cookie remove $mycookies
HTTP::cookie insert name $mycookies value $ckval path $ckpath version 1
}
HTTP::cookie secure $mycookies enable
HTTP::cookie httponly $mycookies enable
}
}
I"m not 100% certain that the quotes are needed, but all instances of it that i've seen in our iRules have had them.
Cheers