Colin MacDonald

+1

I just had this flagged from a security scan as an issue and have had to remove this bundle from my project, unfortunately. Is there a workaround to force the...

Sure, it's part of Symfony's framework config for sessions: https://symfony.com/doc/3.4/reference/configuration/framework.html#cookie-secure and https://symfony.com/doc/3.4/reference/configuration/framework.html#cookie-httponly

Thanks for pointing this out, I was not aware. Is there a way to make the cookie secure on this MobileDetectBundle?

I'd also be interested to know how to achieve both client and server-side validation with the invisible implementation. Thanks.