Documentation
¶
Index ¶
Constants ¶
View Source
const ( ModuleID = "cookie-security-detect" ModuleName = "Cookie Security Detect" ModuleShort = "Detects insecure cookie attributes in HTTP responses" )
Variables ¶
View Source
var ( ModuleDesc = `` /* 625-byte string literal not displayed */ ModuleConfirmation = "Confirmed when Set-Cookie headers lack Secure, HttpOnly, or SameSite attributes" ModuleSeverity = severity.Low ModuleConfidence = severity.Certain ModuleTags = []string{"session", "misconfiguration", "header-security", "hygiene", "light"} )
Functions ¶
This section is empty.
Types ¶
type Module ¶
type Module struct {
modkit.BasePassiveModule
// contains filtered or unexported fields
}
Module implements the Cookie Security Detect passive scanner.
func (*Module) ScanPerRequest ¶
func (m *Module) ScanPerRequest(ctx *httpmsg.HttpRequestResponse, scanCtx *modkit.ScanContext) ([]*output.ResultEvent, error)
ScanPerRequest analyzes Set-Cookie headers for insecure attributes.
Click to show internal directories.
Click to hide internal directories.