Add httponly to API cookies

This commit is contained in:
Alexandre Aubin 2021-08-27 22:45:59 +02:00
parent 3cc511db3a
commit 8562c05d3b

View file

@ -243,6 +243,8 @@ class Session:
infos, infos,
secure=True, secure=True,
secret=Session.secret, secret=Session.secret,
httponly=True,
# samesite="strict", # Bottle 0.12 doesn't support samesite, to be added in next versions
) )
def get_infos(): def get_infos():