rspec/rules/S3330/recommended.adoc
2021-01-27 13:42:22 +01:00

4 lines
188 B
Plaintext

== Recommended Secure Coding Practices
* By default the ``++HttpOnly++`` flag should be set to _true_ for most of the cookies and it's mandatory for session / sensitive-security cookies.