VulnerableApp icon indicating copy to clipboard operation
VulnerableApp copied to clipboard

Enabling Https and Secure cookie for JWT Vulnerability

Open preetkaran20 opened this issue 5 years ago • 0 comments

Till now Spring boot application is only available in Http but going further we want to enable Https, incase we want to write some vulnerabilities related to poor SSL etc and Cookie based attacks in JWTVulnerabilities are not secure and hence we were not able to write a secured vulnerablity for JWT. -> Enabling SSL -> Http and Https both can exist -> thinking more in how can a vulnerability choose between http and https or any other protocol -> correcting JWTVulnerability to include secure attribute in cookie.

preetkaran20 avatar Mar 14 '20 18:03 preetkaran20