The CamelHive Standard · v3.29.0

CH-SEC-036v3.29.0

The session cookie is HttpOnly, Secure and SameSite (Lax or Strict)

Pinned as it read in catalog v3.29.0 — the current version of this rule may read differently, see CH-SEC-036.

Area
SEC
Severity
high
Detection
static
Corpus coverage
not measured by the corpus