# Application uses Double Submit Cookie

* [ ] Check for session fixation on subdomains
* [ ] Man in the the middle attack
