Improved cookie security

  • Resolved svenseeberg

    (@svenseeberg)


    2 years ago

    The cookie swpm_session is currently not using the httpOnly and secure cookie flag. I cannot see that the cookie is used by any JavaScript, therefore the HttpOnly flag should be okay. If HTTPS is available, the secure flag would also be a good idea.

    I could not find an issue tracker or development repo where I could raise a ticket or contribute a PR. If there is one, please let me know.

Viewing 1 replies (of 1 total)
Viewing 1 replies (of 1 total)
  • The topic ‘Improved cookie security’ is closed to new replies.