Cookie CookieUsage

The information stored in a custom cookie should not be sensitive or related to the session. In most cases, sensitive data should only be stored in session and referenced by the user's session cookie.

IndexedPublic repositoryMediumHigh confidenceVerifiedMITscala
greprules fetch gitlab-sast-scala-cookie-rule-cookieusage --engine opengrep

Description

The information stored in a custom cookie should not be sensitive or related to the session. In most cases, sensitive data should only be stored in session and referenced by the user's session cookie.

Detection target

Not provided

Recommended fix

Not provided

False-positive notes

Not provided

Community feedback

Sign in to report false positives, mark this rule useful, or suggest metadata improvements.