Objective-C : Cookie: unlimited expiration time

The application uses persistent cookies. Storing valuable data in persistent cookies may result in loss of confidentiality of these data.

In most cases, by default non-persistent cookies are used. They are not stored on disk and are deleted when the browser is closed. The developer can specify that certain cookies should be persistent, in which case they are written to disk and stored between restarts of the browser or the computer.

If valuable data is stored in persistent cookies, a potential attacker has plenty of time to get access to it.

Sensitive Data Exposure vulnerabilities take the third place in the “OWASP Top 10 2017” web-application vulnerabilities ranking.