Hi,

> You are right, I think !(sslCookie =~ "; [S|s]ecure;?[^a-zA-Z0-9_-]+") 
> will fix the issue.

thanks for this. I'm absolutely no regex specialist but i think this
one is probably better:

!(sslCookie =~ "; [S|s]ecure?[^a-zA-Z0-9_-]+")

as it is not always the case that there is a ";" after the secure flag.

I'm also absolutely not sure if all web applications are using a:

; secure

as  the cookie flag. Maybe there are also webapps which are using:

;secure

for example.
_______________________________________________
Openvas-plugins mailing list
[email protected]
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-plugins

Reply via email to