Coinbase · Report #140742
Cookie not secure
N/Astatus
1upvotes
25 May 2016disclosed
How it was found
The cloudflare cookie does not have the Secure flag set. When a cookie is set with the Secure flag, it instructs the browser that the cookie can only be accessed over secure SSL channels. This is an important security protection for session cookies.