Skip to content

Commit

Permalink
set https only cookie
Browse files Browse the repository at this point in the history
  • Loading branch information
matthew-shaw committed Sep 3, 2024
1 parent 716c5b6 commit 8c2f0b0
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions app/main/routes.py
Original file line number Diff line number Diff line change
Expand Up @@ -38,6 +38,7 @@ def cookies():
"cookies_policy",
json.dumps(cookies_policy),
max_age=31557600,
secure=True,
)

Check warning

Code scanning / CodeQL

Failure to use secure cookies Medium

Cookie is added without the HttpOnly attribute properly set.
return response
elif request.method == "GET":
Expand Down

0 comments on commit 8c2f0b0

Please sign in to comment.