Thursday, 1 June 2023

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute

I am setting some values in cookie through JS in my code. I am passing secure; while setting values to cookie. But still I am getting "Sensitive Cookie in HTTPS Session Without 'Secure' Attribute" as vulnerability.

document.cookie=`${name}=${val1};domain=${domainName};path=/;secure;`;


from Sensitive Cookie in HTTPS Session Without 'Secure' Attribute

No comments:

Post a Comment