Hello, I scanned a gitlab-ce with the Greenbone Security Assistant, e.g. OpenVAS Scanner. I got two vulnerabilities:
Missing Secure Attribute SSL Cookie Information Disclosure Vulnerability Missing httpOnly Cookie Attribute I searched about that, but it seems, anybody has to change the code. Or is any other solution? Thank you. Petra -- You received this message because you are subscribed to the Google Groups "GitLab" group. To unsubscribe from this group and stop receiving emails from it, send an email to gitlabhq+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/gitlabhq/22045103-2949-40b0-8977-7a989691b721%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.