mirror of
https://github.com/agent0ai/agent-zero.git
synced 2026-05-06 08:01:31 +00:00
9e3bbb759f
The CSRF token cookie is set without the Secure flag. On HTTPS deployments the cookie could be transmitted over plain HTTP if a mixed-content scenario occurs. Conditionally add the Secure flag when running on HTTPS (window.location.protocol === 'https:'). No impact on HTTP-only deployments. Severity: Low-Medium |
||
|---|---|---|
| .. | ||
| components | ||
| css | ||
| js | ||
| public | ||
| vendor | ||
| index.css | ||
| index.html | ||
| index.js | ||
| login.css | ||
| login.html | ||