Commit f33e25ac authored by OzzieIsaacs's avatar OzzieIsaacs

Merge remote-tracking branch 'sec_fixes/cookies_improvement'

parents 51365ab0 bf166b75
......@@ -56,6 +56,12 @@ mimetypes.add_type('application/ogg', '.ogg')
mimetypes.add_type('application/ogg', '.oga')
app = Flask(__name__)
app.config.update(
SESSION_COOKIE_HTTPONLY=True,
SESSION_COOKIE_SAMESITE='Lax',
REMEMBER_COOKIE_SAMESITE='Lax',
)
lm = LoginManager()
lm.login_view = 'web.login'
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment