security - Are all kinds of cookie signed and thus cannot be altered or only session cookie in Play? -
In the document it is said that play session cookie so that customer information can not be changed. However, this does not mention anything about non-session cookies, so my question is, whether to sign all types of cookies or do only one for sessions?
This only indicates a session for
check
The signed field is incorrect on the other hand for the session on the other side:
Comments
Post a Comment