Commit 4b3381f
committed
Security: make CSRF cookie more secure
To fix the following warnings:
1. Error: Low: Sensitive data may be stored by the application in a
cookie [com.miguno.migunos.filters.CustomCsrfFilter] At
CustomCsrfFilter.java:[line 31] COOKIE_USAGE
2. Error: Medium: Cookie without the HttpOnly flag could be read by a
malicious script in the browser
[com.miguno.migunos.filters.CustomCsrfFilter] At
CustomCsrfFilter.java:[line 32] HTTPONLY_COOKIE
3. Error: Medium: Cookie without the secure flag could be sent in clear
text if an HTTP URL is visited
[com.miguno.migunos.filters.CustomCsrfFilter] At
CustomCsrfFilter.java:[line 32] INSECURE_COOKIE1 parent db77aed commit 4b3381f
File tree
1 file changed
+2
-0
lines changed- src/main/java/com/miguno/javadockerbuild/security
1 file changed
+2
-0
lines changedLines changed: 2 additions & 0 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
28 | 28 | | |
29 | 29 | | |
30 | 30 | | |
| 31 | + | |
| 32 | + | |
31 | 33 | | |
32 | 34 | | |
33 | 35 | | |
| |||
0 commit comments