31 lines
769 B
Plaintext
31 lines
769 B
Plaintext
|
include::../description.adoc[]
|
||
|
|
|
||
|
|
include::../ask-yourself.adoc[]
|
||
|
|
|
||
|
|
include::../recommended.adoc[]
|
||
|
|
|
||
|
|
== Sensitive Code Example
|
||
|
|
|
||
|
|
----
|
||
|
|
Cookie myCookie = new Cookie("name", "val");
|
||
|
|
myCookie.setDomain(".com"); // Noncompliant
|
||
|
|
java.net.HttpCookie myOtherCookie = new java.net.HttpCookie("name", "val");
|
||
|
|
myOtherCookie.setDomain(".com"); // Noncompliant
|
||
|
|
----
|
||
|
|
|
||
|
|
== Compliant Solution
|
||
|
|
|
||
|
|
----
|
||
|
|
Cookie myCookie = new Cookie("name", "val"); // Compliant; by default, cookies are only returned to the server that sent them.
|
||
|
|
|
||
|
|
// or
|
||
|
|
|
||
|
|
Cookie myCookie = new Cookie("name", "val");
|
||
|
|
myCookie.setDomain(".myDomain.com"); // Compliant
|
||
|
|
|
||
|
|
java.net.HttpCookie myOtherCookie = new java.net.HttpCookie("name", "val");
|
||
|
|
myOtherCookie.setDomain(".myDomain.com"); // Compliant
|
||
|
|
----
|
||
|
|
|
||
|
|
include::../see.adoc[]
|