Insecure Cookie (ARCH8123)
Dieser Inhalt ist noch nicht in deiner Sprache verfügbar.
Key kotlin.security.insecure-cookie · Severity warning · Category security · CWE CWE-614
Flags cookies created without secure = true - they travel over plain HTTP.
Incorrect
Section titled “Incorrect”val c = Cookie("session", id)response.addCookie(c)Correct
Section titled “Correct”val c = Cookie("session", id).apply { secure = true; isHttpOnly = true }Set secure = true on every cookie that carries a session or token.