Security audit

Cookie security attributes

6 checks · 2 findings · scope: page, site

Audit id: security.cookie_flags.

Checks

Login cookie can travel over insecure connections session_cookie_without_secure
Cookie readable by page scripts without_httponly
Cookie sent along with requests from other sites without_samesite
Cookie shared with too many subdomains overly_broad_domain
Login stays valid for too long long_lived_session
Cookie holds a flag the visitor can change trust_flag_in_cookie

Findings