Explicitly set 'http_only' to true

2018-08-28 22:34:31 +02:00 · 2018-08-28 22:34:31 +02:00 · 18ad8aaecf
commit 18ad8aaecf
parent 4656a07e9e
1 changed files with 1 additions and 0 deletions
--- a/lib/pleroma/web/endpoint.ex
+++ b/lib/pleroma/web/endpoint.ex
@ -50,6 +50,7 @@ defmodule Pleroma.Web.Endpoint do
    store: :cookie,
    key: "_pleroma_key",
    signing_salt: "CqaoopA2",
+    http_only: true,
    secure:
      Application.get_env(:pleroma, Pleroma.Web.Endpoint) |> Keyword.get(:secure_cookie_flag),
    extra: "SameSite=Strict"