The xsrf cookie token is not a 'secure' cookie for secure('https') requests

XMLWordPrintable

    • 6.01
    • 2.6

      To prevent against man in the middle attacks the xsrf cookie token should have the 'secure' attribute set.

            Assignee:
            Unassigned
            Reporter:
            David Black
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated:
              Resolved: