2

I was wondering if there is a setting for creating secure cookies on M2. I have a vulnerability check and it shown that cookies don't have "secure" tags.

Or do I need to override a core function?

Improve this question
1
  • ... any luck taking care of this? I have the same issue.
    – vector
    Commented Sep 20, 2017 at 20:17

1 Answer 1

Reset to default
0

This seems to be a persistent problem when a site gets scanned for PCI compliance. Issue seems to be going back quite a while: https://community.magento.com/t5/Technical-Issues/Need-suggestions-regarding-quot-Missing-Secure-Flag-From-SSL/td-p/19777

One hacky fix is suggested here: https://stackoverflow.com/questions/26792989/where-is-secure-tag-in-magento-cookie-on-ssl-secure-site

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.