class

Flaw::InsecureCookie

Inherits Flaw::Rule < Reference < Object

FLAW019 — Cookie set without Secure / HttpOnly / SameSite flags.

Constants

COOKIE_NEW = /\bHTTP::Cookie\.new\s*\(/

HTTP::Cookie.new("name", "value") without the flags passed

Instance methods

check(source : String, path : String) : Array(Finding)
Source
default_severity
Source
description
Source
title
Source