i forgot httponly oops lol

2017-07-30 14:09:41 +02:00 · 2017-07-30 14:09:41 +02:00 · dbc77671a2
parent f3a37a11d1
commit dbc77671a2
1 changed files with 1 additions and 0 deletions
--- a/routes.py
+++ b/routes.py
@ -50,6 +50,7 @@ def twitter_login_step2():
    resp = Response(status=301, headers={"location": url_for('index')})
    resp.set_cookie('forget_sid', session.id,
        max_age=60*60*48,
+        httponly=True,
        secure=app.config.get("HTTPS"))
    return resp