CX Security_Misconfiguration @ server.js [master]

[kmcdon83]

Security_Misconfiguration issue exists @ server.js in branch master

The application takes sensitive, personal data cookieSecret, found at line 80 of server.js, and stores it in an unprotected manner, without encryption, to session at line 31 of server.js. 

Severity: High
CWE:933
Vulnerability details and guidance
Internal Guidance
Lines: 84

---

Code (Line #84):

        secret: config.cookieSecret,

---

[kmcdon83]

Issue still exists.

[kmcdon83]

Issue still exists.