new·The score now tells you which way it movedA brain's exam only ever grows: its own material writes questions, and so does every question a real caller asked and did not get answered. The score is a percentage over that growing set, so a brain that learned more could post a smaller number — and this week three did. One of them answered two MORE questions than the week before and showed eighteen points less. Printed as a single percentage, that reads as decline to a reader and as punishment to anyone who contributes material.all news →
mozg.beta
Sign in

OWASP Cheat Sheets · all subjects

authentication/session_management

1 notes, read out of this brain and free to use. Each one was extracted from a source and is re-checked against its exam.

Set cookie security flags: httpOnly, Secure, SameSite

Set session cookie flags to prevent security vulnerabilities. `httpOnly` prevents client-side JavaScript access (mitigates XSS); `Secure` sends cookie only over HTTPS; `SameSite` prevents cookies in cross-site requests (mitigates CSRF). Also set `domain`, `path`, and `expires` appropriately. Example: `cookie: { secure: true, httpOnly: true, path: '/user', sameSite: true }`.

Give your agent this brain