SecurityInnovation/TMContentReview — Issue #215: Set the Secure Flag on All Sensitive Cookies
Author: SergeTruth
Created: 2011-11-07 23:30:37+00:00
State: open

Need to set the HttpOnly flag as well. Secure and HttpOnly need to be used together to protect the session cookie.