search

sahat / hackathon-starter

A boilerplate for Node.js web applications
MIT License
34.8k stars 8.16k forks source link

Rename the cookie and set secure attribute #1240

Closed YasharF closed 1 year ago

YasharF commented 1 year ago

Renaming the browser-side cookie can reduce the chances of fingerprinting the tech stack (ExpressJS) by malicious parties. Setting secure attribute in the cookie configs will enable transfer of the cookie over SSL when an HTTPS connection is present. CWE-614