Merge pull request #2555 from luisramos0/cookie_http_only

Added httponly to cookieConsent cookie, this makes this cookie secure…
2026-04-05 07:19:14 +00:00 · 2018-08-24 15:50:13 +10:00
parent a37931afda 56879377d5
commit 616b42a14d
1 changed files with 2 additions and 1 deletions
--- a/app/services/cookies_consent.rb
+++ b/app/services/cookies_consent.rb
@@ -18,7 +18,8 @@ class CookiesConsent
    cookies[COOKIE_NAME] = {
      value: COOKIE_NAME,
      expires: 1.year.from_now,
-      domain: domain
+      domain: domain,
+      httponly: true
    }
  end