Merge remote-tracking branch 'sec_fixes/cookies_improvement'

5 years ago · f33e25ac40
parent 51365ab006 bf166b757a
commit f33e25ac40
1 changed files with 6 additions and 0 deletions
--- a/cps/init.py
+++ b/cps/init.py
@ -56,6 +56,12 @@ mimetypes.add_type('application/ogg', '.ogg')
 mimetypes.add_type('application/ogg', '.oga')
 app = Flask(__name__)
 app.config.update(
    SESSION_COOKIE_HTTPONLY=True,
    SESSION_COOKIE_SAMESITE='Lax',
    REMEMBER_COOKIE_SAMESITE='Lax',
 )
 lm = LoginManager()
 lm.login_view = 'web.login'