search

rokrebs / CIS4595

Capstone Project
0 stars 0 forks source link

[Medium Risk] Sensitive Cookie in HTTPS Session Without 'Secure' Attribute #11

Closed jvs7 closed 2 years ago

jvs7 commented 2 years ago

Cookie misses the Secure attribute (it is false by default). Set it to true to protect the cookie from man-in-the-middle attacks.

Location: config/appSetup.js Line 31

rokrebs commented 2 years ago

secure attribute added