Contrib.social

Cookies don't contain the "HTTPOnly" attribute nor the "secure" attribute

Open on Drupal.org →
Created on 2 September 2020, about 4 years ago
Updated 10 February 2023, almost 2 years ago

Running a scan report on my site, where I am using this module, reports the following vulnerabilities.

  • Cookie does not contain the "HTTPOnly" attribute
  • Cookie does not contain the "secure" attribute
🐛 Bug report
Status

Closed: works as designed

Version

1.0

Component

Code

Created by

🇺🇸United States code-drupal

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

contrib.social Blog FAQ Discussions
Production build 0.71.5 2024