rspec/rules/S2092/description.adoc
2021-01-27 13:42:22 +01:00

2 lines
233 B
Plaintext

When a cookie is protected with the ``++secure++`` attribute set to _true_ it will not be send by the browser over an unencrypted HTTP request and thus cannot be observed by an unauthorized person during a man-in-the-middle attack.