i forgot httponly oops lol

This commit is contained in:
codl 2017-07-30 14:09:41 +02:00
parent f3a37a11d1
commit dbc77671a2
No known key found for this signature in database
GPG Key ID: 6CD7C8891ED1233A
1 changed files with 1 additions and 0 deletions

View File

@ -50,6 +50,7 @@ def twitter_login_step2():
resp = Response(status=301, headers={"location": url_for('index')}) resp = Response(status=301, headers={"location": url_for('index')})
resp.set_cookie('forget_sid', session.id, resp.set_cookie('forget_sid', session.id,
max_age=60*60*48, max_age=60*60*48,
httponly=True,
secure=app.config.get("HTTPS")) secure=app.config.get("HTTPS"))
return resp return resp