HexBrain

Coinbase · Report #140742

Cookie not secure

N/Astatus
1upvotes
25 May 2016disclosed

How it was found

The cloudflare cookie does not have the Secure flag set. When a cookie is set with the Secure flag, it instructs the browser that the cookie can only be accessed over secure SSL channels. This is an important security protection for session cookies.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original