Cookie CookieUsage

The information stored in a custom cookie should not be sensitive or related to the session. In most cases, sensitive data should only be stored in session and referenced by the user's session cookie.

IndexedPublic repositoryMediumHigh confidenceVerifiedMITScala
greprules fetch gitlab-sast-scala-cookie-rule-cookieusage --engine opengrep

Description

The information stored in a custom cookie should not be sensitive or related to the session. In most cases, sensitive data should only be stored in session and referenced by the user's session cookie.