Cookie CookieInsecure

"A new cookie is created without the Secure flag set. The Secure flag is a directive to the browser to make sure that the cookie is not sent for insecure communication (http://)"

IndexedPublic repositoryMediumMedium confidenceVerifiedLGPL-3.0-onlyKotlin
greprules fetch gitlab-sast-rules-lgpl-kotlin-cookie-rule-cookieinsecure --engine opengrep

Description

"A new cookie is created without the Secure flag set. The Secure flag is a directive to the browser to make sure that the cookie is not sent for insecure communication (http://)"