VulnerableApp
VulnerableApp copied to clipboard
Enabling Https and Secure cookie for JWT Vulnerability
Till now Spring boot application is only available in Http but going further we want to enable Https, incase we want to write some vulnerabilities related to poor SSL etc and Cookie based attacks in JWTVulnerabilities are not secure and hence we were not able to write a secured vulnerablity for JWT. -> Enabling SSL -> Http and Https both can exist -> thinking more in how can a vulnerability choose between http and https or any other protocol -> correcting JWTVulnerability to include secure attribute in cookie.