Set HttpOnly flag

2016-03-21 14:12:38 +02:00
parent 80240e9b9e
commit 9d14fe2d7e
1 changed files with 1 additions and 0 deletions
--- a/config/session.php
+++ b/config/session.php
@@ -149,5 +149,6 @@ return [
    */

    'secure' => false,
+    'http_only' => true,

 ];