barbushin / php-console

Handle PHP errors, dump variables, execute PHP code remotely in Google Chrome
https://chrome.google.com/webstore/detail/php-console/nfhmhhlpfleoednkpnnnkolmclajemef
MIT License
1.34k stars 283 forks source link

Cookie Does Not Contain The "secure" Attribute #133

Open mattwinans opened 7 years ago

mattwinans commented 7 years ago

Hello, I am currently in the process of ensuring my website is PCI compliant (https://pci.trustwave.com/evo?sl=evo). This process involves a scan and it has reported a couple vulnerabilities with a PHP Console cookie not containing the "secure" attribute (see below):

php-console_cookie

If I cannot comply with these rules, I will owe hundreds of dollars in fines. Is there a way we can get an update to fix this so I won't be forced to uninstall PHP Console?

Thank you in advance

Matt