Add httponly to session cookie.

2020-09-09 19:19:35 -07:00 · 2020-09-09 19:19:35 -07:00 · cb881ed640
commit cb881ed640
parent 2ba4a3bb91
1 changed files with 1 additions and 0 deletions
--- a/frontends/etiquette_flask/backend/sessions.py
+++ b/frontends/etiquette_flask/backend/sessions.py
@ -93,6 +93,7 @@ class SessionManager:
                    'etiquette_session',
                    value=session.token,
                    max_age=SESSION_MAX_AGE,
+                    httponly=True,
                )

            return response