[aerogear-issues] [JBoss JIRA] (AEROGEAR-717) Enforce the "HTTPOnly" flag, if If the application doesn't need to access the cookie

Bruno Oliveira (JIRA) aerogear-issues at lists.jboss.org
Mon Jan 7 09:21:08 EST 2013

Previous message: [aerogear-issues] [JBoss JIRA] (AEROGEAR-715) Malicious attackers can easily bypass the login page using XSS
Next message: [aerogear-issues] [JBoss JIRA] (AEROGEAR-714) Sanitize all user-supplied data before using it as part of dynamically generated pages and data
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/aerogear-issues/attachments/20130107/f8910ba5/attachment.html

Previous message: [aerogear-issues] [JBoss JIRA] (AEROGEAR-715) Malicious attackers can easily bypass the login page using XSS
Next message: [aerogear-issues] [JBoss JIRA] (AEROGEAR-714) Sanitize all user-supplied data before using it as part of dynamically generated pages and data
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

More information about the aerogear-issues mailing list