From 3680ac1d73fcea841b98963e407acc184b0fcdea Mon Sep 17 00:00:00 2001 From: Mohamed Dawoud <113205913+mdawoud27@users.noreply.github.com> Date: Wed, 2 Jul 2025 17:17:22 +0300 Subject: [PATCH] fix: Potential fix for code scanning alert no. 17 Clear text transmission of sensitive cookie Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> --- src/__tests__/mocks/app.mock.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/__tests__/mocks/app.mock.js b/src/__tests__/mocks/app.mock.js index 70b2889..7afc4bf 100644 --- a/src/__tests__/mocks/app.mock.js +++ b/src/__tests__/mocks/app.mock.js @@ -26,7 +26,7 @@ app.use( resave: false, saveUninitialized: true, cookie: { - secure: false, + secure: process.env.NODE_ENV === 'production', httpOnly: true, }, }),