Reputation: 103
I tested web application with commercial tool for penetration test .I found a bug which is related to Missing Secure Attribute in Encrypted Session (SSL) Cookie. Web application has written .Net . For this reason I added this content to web config:
<httpCookies requireSSL="true" />
After that I checked application in browser with "Advanced Cookie Manager" add-on in Firefox. Results of Advanced Cookie Manager some attributes isSecure's value true, some attribute's IsSecure value false. I want to re-check secure attribute.How can I do this?
Upvotes: 1
Views: 4232