rspec/rules/S2092/ask-yourself.adoc
2021-04-28 16:49:39 +02:00

7 lines
353 B
Plaintext

== Ask Yourself Whether
* the cookie is for instance a _session-cookie_ not designed to be sent over non-HTTPS communication.
* it's not sure that the website contains https://developer.mozilla.org/en-US/docs/Web/Security/Mixed_content[mixed content] or not (ie HTTPS everywhere or not)
There is a risk if you answered yes to any of those questions.