rspec/rules/S2092/recommended.adoc

5 lines
241 B
Plaintext
Raw Normal View History

2020-06-30 12:48:07 +02:00
== Recommended Secure Coding Practices
* It is recommended to use `+HTTPs+` everywhere so setting the `+secure+` flag to _true_ should be the default behaviour when creating cookies.
* Set the `+secure+` flag to _true_ for session-cookies.