Insecure Cookie High

Ensure 'secure' is set to safeguard against unencrypted transmissions, and 'httponly' is configured to bolster defense against cross-site scripting (XSS) attacks.

Detector ID

ruby/insecure-cookie@v1.0