From 67c94bb04542c3e6fa4e07e186292ee0ba6150dd Mon Sep 17 00:00:00 2001 From: Matthew Wild Date: Mon, 29 Apr 2024 11:08:30 +0100 Subject: [PATCH] Add 'secure' attribute to session cookies --- snikket_web/__init__.py | 1 + 1 file changed, 1 insertion(+) diff --git a/snikket_web/__init__.py b/snikket_web/__init__.py index 0ff473c..2651cd2 100644 --- a/snikket_web/__init__.py +++ b/snikket_web/__init__.py @@ -212,6 +212,7 @@ def create_app() -> quart.Quart: app.config["PRIVACY_URI"] = config.privacy_uri app.config["ABUSE_EMAIL"] = config.abuse_email app.config["SECURITY_EMAIL"] = config.security_email + app.config["SESSION_COOKIE_SECURE"] = True app.context_processor(proc) app.register_error_handler(