Replies: 1 comment
-
Send PR please |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Why there is no secure flag in response header
for tracy-session?
bin/vendor/tracy/tracy/src/Tracy/Session/FileSession.php
line #54
setcookie($this->cookieName, $id, time() + self::CookieLifetime, '/', '', false, true);
If there was the penultimate parametr true or computed from $_SERVER, it could be.
The Burp tool is complaining about it.
"Issue detail
The following cookie was issued by the application and does not have the secure flag set:
tracy-session
"
Beta Was this translation helpful? Give feedback.
All reactions