Set HttpOnly on cookies (#8110)

2026-11-05 08:23:15 +08:00 · 2026-11-04 12:59:44 -09:00
parent cc7388533d
commit 3798a42dc9
1 changed files with 1 additions and 0 deletions
@@ -330,6 +330,7 @@ export const getCookieOptions = (req: express.Request): express.CookieOptions =>
    domain: getCookieDomain(url.host, req.args["proxy-domain"]),
    path: normalize(url.pathname) || "/",
    sameSite: "lax",
+    httpOnly: true,
  }
 }