httponly cookie by default

This commit is contained in:
Milos Stojanovic
2021-09-27 10:35:34 +02:00
parent 5ddec1a0e0
commit e79fc71142

View File

@@ -48,6 +48,7 @@ return [
return new \Symfony\Component\HttpFoundation\Session\Storage\NativeSessionStorage([ return new \Symfony\Component\HttpFoundation\Session\Storage\NativeSessionStorage([
"cookie_samesite" => "Lax", "cookie_samesite" => "Lax",
"cookie_secure" => null, "cookie_secure" => null,
"cookie_httponly" => true,
], $handler); ], $handler);
}, },
], ],