CookieSessionHandler::setSecureAttribute

private function setSecureAttribute(Cookie $cookie): Cookie
{
	$context = Context::getCurrent();
	if (!$context)
	{
		return $cookie;
	}

	$request = $context->getRequest();
	$secure = (Option::get('main', 'use_secure_password_cookies', 'N') === 'Y' && $request->isHttps());
	$cookie
		->setHttpOnly(true)
		->setSecure($secure)
	;

	return $cookie;
}