- The
py/insecure-cookiequery has been split into multiple queries; withpy/insecure-cookiechecking for cases in whichSecureflag is not set,py/client-exposed-cookiechecking for cases in which theHttpOnlyflag is not set, and thepy/samesite-nonequery checking for cases in which theSameSiteattribute is set toNone. These queries also now only alert for cases in which the cookie is detected to contain sensitive data.