httponly cookie by default

2025-08-09 08:47:13 +02:00 · 2021-09-27 10:35:34 +02:00
parent 5ddec1a0e0
commit e79fc71142
1 changed files with 1 additions and 0 deletions
--- a/configuration_sample.php
+++ b/configuration_sample.php
@@ -48,6 +48,7 @@ return [
                    return new \Symfony\Component\HttpFoundation\Session\Storage\NativeSessionStorage([
                            "cookie_samesite" => "Lax",
                            "cookie_secure" => null,
+                            "cookie_httponly" => true,
                        ], $handler);
                },
            ],