When using session cookies, the secure flag should be set to true for sensitive data to ensure the data is protected. It's also good practice to always set it to true.
This rule checks for a servlet cookie with a call to method setSecure with value false.
When using session cookies, the secure flag should be set to true for sensitive data to ensure the data is protected. It's also good practice to always set it to true.
This rule checks for a servlet cookie with a call to method setSecure with value false.