-
Notifications
You must be signed in to change notification settings - Fork 53
TWA 0802
Ulrich Berntien edited this page Sep 8, 2020
·
2 revisions
cookie '${cookie_name}' has no 'secure' flag
In the message output the variable ${cookie_name} is replaced by the name of the cookie.
A cookie was found in the HTTP response that is not marked as 'secure'.
The web browser will not send cookies with the 'secure' flag in clear text. The web browser will send the 'secure' marked cookies only through a HTTPS connection. So the content of the cookie is protected against sniffing TCP network traffic.
Set the secure flag on the cookie in your web application.