As per my security checking and testing in Magento 2.1, I see that secure cookie or HTTP only flag not set on form_key and mage-messages.For the security reason, we need the cookie to be secure. Can someone please help me on this.

enter image description here

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.