HttpOnly Cookie flag missing | ww.wp.xz.cn

Resolved svenseeberg
(@svenseeberg)

3 years, 4 months ago

Currently, the apbct_timestamp cookie is only accessed in the PHP code. It would be possible to improve security and add a HttpOnly flag for it.

Viewing 2 replies - 1 through 2 (of 2 total)

Plugin Support amagsumov
(@amagsumov)

3 years, 4 months ago

Hello @svenseeberg

Thank you for your suggestion. I’ve passed it to the developers.

We’ll contact you about results within 2 business days.

Plugin Support eugenecleantalk
(@eugenecleantalk)

3 years, 4 months ago

Here is our fixed version: https://github.com/CleanTalk/wordpress-antispam/releases/download/fix-version/cleantalk-spam-protect.zip

Go to WordPress Administrator Panel —> Plugins.
Find the “Anti-Spam by CleanTalk” plugin —> Deactivate, then Delete.
Download the plugin archive from here:
Go to Plugins —> Add New —> Upload Plugin.
Choose the downloaded archive and press “Install Now”.

All the changes made will be included in the next official release.

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘HttpOnly Cookie flag missing’ is closed to new replies.

Tags

cookie

2 replies
3 participants
Last reply from: eugenecleantalk
Last activity: 3 years, 4 months ago
Status: resolved