Liberapay · Report #498865
Session Cookie without HttpOnly and secure flag set
Informativestatus
2upvotes
21 Feb 2019disclosed
Summary
This report was closed as informative because we decided that for this to be a significant concern, the reporter would have to chain this issue with something else such as cross-site scripting.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.