-
Notifications
You must be signed in to change notification settings - Fork 53
TWA 0806
Ulrich Berntien edited this page Sep 8, 2020
·
1 revision
cookie '${cookie_name}' must contain a 'Domain' attribute
In the message output the variable ${cookie_name} is replaced by the name of the cookie.
A cookie was found in the HTTP response with name __Secure- prefix but with no Domain attribute.
The cookie should contain a 'Domain' attribute to explicit limit the destination to a domain. The browser will sent the cookie only in request to web server with matching URL.
Correct the attributes or the name of the cookie in your web application.