Cross-site Request Forgery (CSRF)

github.com/go-macaron/csrf is vulnerable to Cross-site Request Forgery CSRF. The vulnerability exists because the Generate function in csrf.go does not set the secure mode for the CSRF cookie as the value is hardcoded to false for the corresponding arguments of SetCookie, allowing an attacker to...

GO-2022-1213 Insecure generation of cookies in github.com/go-macaron/csrf

The Options.Secure value is ignored, and cookies created by Generate never have the secure attribute...