Details

    • Type: Language-Specification
    • Status: Active
    • Resolution: Unresolved
    • Labels:
      None
    • Impact:
      Unknown 'null' severity
    • Likelihood:
      Unknown 'null' severity

      Description

      Sensitive Code Example

      <session-config>
       <cookie-config>
        <http-only>false</http-only> <!-- Sensitive -->
       </cookie-config>
      </session-config>
      
      <session-config>
       <cookie-config> <!-- Sensitive: http-only tag is missing defaulting to false -->
       </cookie-config>
      </session-config>
      

      Compliant Solution

      <session-config>
       <cookie-config>
        <http-only>true</http-only> <!-- Compliant -->
       </cookie-config>
      </session-config>
      

        Attachments

          Activity

            People

            Assignee:
            Unassigned Unassigned
            Reporter:
            alexandre.gigleux Alexandre Gigleux
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Dates

              Created:
              Updated: