6.0.0-beta1
▾
Tasks
New Task
Search
Photos
Wiki
▾
Tickets
New Ticket
Search
dev.horde.org
Toggle Alerts Log
Help
11/7/25
H
istory
A
ttachments
C
omment
W
atch
Download
Comment on [#7904] Horde Mail Insecure Cookie Sanitization over HTTPS
*
Your Email Address
*
Spam protection
Enter the letters below:
.__..__ . ..__ .__. | |[__)| |[__)[__] |__\| \|__|| \| |
Comment
> It is possible to send a cookies over HTTP even when HTTPS is > implemented during insecure state of cookie. The parameters are not > properly structured in set cookie parameter. On security basis secure > parameter should be applied in the cookie arguments to prevent the > transference of cookies over HTTP. > > > > This can be possible to Surf Jacking attacks. > > > > > > > >
Attachment
Watch this ticket
N
ew Ticket
M
y Tickets
S
earch
Q
uery Builder
R
eports
Saved Queries
Open Bugs
Bugs waiting for Feedback
Open Bugs in Releases
Open Enhancements
Enhancements waiting for Feedback
Bugs with Patches
Enhancements with Patches
Release Showstoppers
Stalled Tickets
New Tickets
Horde 5 Showstoppers