Override Express cookie defaults
Express session cookie settings should not omit explicit lifetime, scope, and transport attributes.
#Metadata
#Why it matters
Implicit cookie defaults vary by middleware and make auth state harder to audit consistently.
#Remediation
Set explicit cookie lifetime, scope, and transport attributes instead of relying on middleware defaults.
#Repository path
The generated metadata points to critiq-rules/libs/rules/catalog/rules/typescript/ts.security.express-default-cookie-config.rule.yaml.