CX Sensitive_Cookie_in_HTTPS_Session_Without_Secure_Attribute @ root/basket.jsp [master]

[CxYair]

Sensitive_Cookie_in_HTTPS_Session_Without_Secure_Attribute issue exists @ root/basket.jsp in branch master

The root\basket.jsp application configuration file, at line 84, does not define sensitive application cookies with the "secure" flag, which could cause the client to send those cookies in plaintext over an insecure network communication (HTTP). This may lead to a Session Hijacking attack.

Severity: Low

CWE:614

Checkmarx

Training
Recommended Fix

Lines: 84

---

Code (Line #84):

			response.addCookie(new Cookie("b_id", basketId));

---