HTTPOnly not Set
Open
Nobody has claimed this yet.
- Dominant language
- Java
- Stars
- 72
- Forks
- 69
- Avg merge
- 23h 32m
- Merged PRs (30d)
- 4
Description
https://github.com/vmware/singleton/blob/3e000ea58db1547d16512f27297d0de7a6feb0ea/g11n-ws/vip-manager-i18n/src/test/java/com/vmware/vip/i18n/api/v1/common/RequestUtil.java#L62
The program creates a cookie, but fails to set the HttpOnly flag to true.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reading g11n-ws/vip-manager-i18n/src/test/java/com/vmware/vip/i18n/api/v1/common/RequestUtil.java around line 62, where the cookie is created. Verify the cookie is configured with the HttpOnly flag enabled, then use the surrounding test code to confirm the expected cookie behavior.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- security
- Issue type
- Bug
- Difficulty
- 1/5
- Estimated time
- Under an hour
- Activity status
- Stale
- Clarity
- Clearly specified
- Newbie friendliness
- 35/100