Override Express session defaults
Express session middleware should not rely on default session naming and configuration.
#Metadata
#Why it matters
Default session settings make applications easier to fingerprint and often skip explicit hardening choices.
#Remediation
Set an explicit session name and hardening options instead of relying on middleware defaults.
#Repository path
The generated metadata points to critiq-rules/libs/rules/catalog/rules/typescript/ts.security.express-default-session-config.rule.yaml.