Merge remote-tracking branch 'sec_fixes/strong_session_protection'

4 years ago · 51365ab006
parent d61b7e48d7 b4165335a7
commit 51365ab006
1 changed files with 1 additions and 0 deletions
--- a/cps/init.py
+++ b/cps/init.py
@ -60,6 +60,7 @@ app = Flask(__name__)
 lm = LoginManager()
 lm.login_view = 'web.login'
 lm.anonymous_user = ub.Anonymous
+lm.session_protection = 'strong'

 ub.init_db(cli.settingspath)
 # pylint: disable=no-member