Hello,

I scanned a gitlab-ce with the Greenbone Security Assistant, e.g. OpenVAS 
Scanner.
I got two vulnerabilities:

Missing Secure Attribute SSL Cookie Information Disclosure Vulnerability
Missing httpOnly Cookie Attribute

I searched about that, but it seems, anybody has to change the code.
Or is any other solution?

Thank you.
Petra

-- 
You received this message because you are subscribed to the Google Groups 
"GitLab" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to gitlabhq+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/gitlabhq/22045103-2949-40b0-8977-7a989691b721%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to