Browse Source

Secure remember cookie. This doesn't enable http-only

session-cookie
Sindre Stephansen 5 years ago
parent
commit
1257cadf70
1 changed files with 1 additions and 1 deletions
  1. +1
    -1
      src/app/views/login.py

+ 1
- 1
src/app/views/login.py View File

@@ -63,7 +63,7 @@ class Login():
session.userid = userid
if remember:
rememberme = self.rememberme(remember_timeout)
web.setcookie('remember', rememberme , remember_timeout)
web.setcookie('remember', rememberme , remember_timeout, secure=True, samesite='Strict')

def check_rememberme(self):
"""


Loading…
Cancel
Save