Security + Privacy suggestions

[jasonLaster]

Replay could begin looking for common security and privacy (gdpr) issues and calling out potential vulnerabilities / bad-practices.

Security

1. look for cookies that are not httpOnly
2. do a headers audit similar to securityheaders.com
3. look for long expiration windows

Privacy / data

1. look for SSNs passed as parameters
2. audit external domains that data is sent to