rspec/rules/S2092/recommended.adoc
2021-01-27 13:42:22 +01:00

5 lines
253 B
Plaintext

== Recommended Secure Coding Practices
* It is recommended to use ``++HTTPs++`` everywhere so setting the ``++secure++`` flag to _true_ should be the default behaviour when creating cookies.
* Set the ``++secure++`` flag to _true_ for session-cookies.