Title: Missing secure flag
Last modified: July 18, 2023

---

# Missing secure flag

 *  Resolved [Ritesh Patel](https://wordpress.org/support/users/ritteshpatel/)
 * (@ritteshpatel)
 * [2 years, 10 months ago](https://wordpress.org/support/topic/missing-secure-flag/)
 * Hello,
 * We have performed the security test of our site with [https://www.immuniweb.com/websec/](https://www.immuniweb.com/websec/)
   and it has reported following warning for all the UTM cookies.
   `The cookie is
   missing Secure, HttpOnly and SameSite flag. Make sure it does not store sensitive
   information.`
 * Is there a way to fix this? Can we add support for this flags as the js-cookie
   package already supports it [https://github.com/js-cookie/js-cookie#secure](https://github.com/js-cookie/js-cookie#secure)?
 * Thanks.
    -  This topic was modified 2 years, 10 months ago by [Ritesh Patel](https://wordpress.org/support/users/ritteshpatel/).

Viewing 3 replies - 1 through 3 (of 3 total)

 *  Plugin Author [Haktan Suren](https://wordpress.org/support/users/haktansuren/)
 * (@haktansuren)
 * [2 years, 9 months ago](https://wordpress.org/support/topic/missing-secure-flag/#post-16964568)
 * Actually, we are using the same package as well. Which cookies are causing the
   error mentioned above?
 *  Thread Starter [Ritesh Patel](https://wordpress.org/support/users/ritteshpatel/)
 * (@ritteshpatel)
 * [2 years, 9 months ago](https://wordpress.org/support/topic/missing-secure-flag/#post-16971257)
 * Hi Haktan,
 * I see this for all the `utm_` cookies.
 * I think it just need to set the secure flag in while setting the cookie?
 * `Cookies.set(v, cookie_field, { expires: 30, secure: true|false });`
 *  Plugin Author [Haktan Suren](https://wordpress.org/support/users/haktansuren/)
 * (@haktansuren)
 * [2 years, 9 months ago](https://wordpress.org/support/topic/missing-secure-flag/#post-16971392)
 * Hi [@ritteshpatel](https://wordpress.org/support/users/ritteshpatel/) , thanks
   for the feedback. I’m planning to make a new release soon. Will add this piece
   there too.

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘Missing secure flag’ is closed to new replies.

 * ![](https://ps.w.org/handl-utm-grabber/assets/icon-256x256.png?rev=2817979)
 * [HandL UTM Grabber / Tracker](https://wordpress.org/plugins/handl-utm-grabber/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/handl-utm-grabber/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/handl-utm-grabber/)
 * [Active Topics](https://wordpress.org/support/plugin/handl-utm-grabber/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/handl-utm-grabber/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/handl-utm-grabber/reviews/)

 * 3 replies
 * 2 participants
 * Last reply from: [Haktan Suren](https://wordpress.org/support/users/haktansuren/)
 * Last activity: [2 years, 9 months ago](https://wordpress.org/support/topic/missing-secure-flag/#post-16971392)
 * Status: resolved