Merge pull request #11549 from mbaluda/mbaluda/insecure-cookie

Java: Support interprocedural setting of cookie security

java/ql/test/query-tests/security/CWE-311/CWE-614/semmle/tests/Test.java

@@ -84,5 +84,15 @@ class Test {
 			response.addCookie(cookie);
 		}
 
+		{
+			// GOOD: set secure flag in call to `createSecureCookie`
+			response.addCookie(createSecureCookie());
+		}
+	}
+	
+	private static Cookie createSecureCookie() {
+		Cookie cookie = new Cookie("secret", "fakesecret");
+		cookie.setSecure(constTrue);
+		return cookie;
 	}
 }