浏览代码

Store session cookie as httponly

Jordi Boggiano 10 年之前
父节点
当前提交
c503b2c329
共有 1 个文件被更改,包括 1 次插入0 次删除
  1. 1 0
      app/config/config.yml

+ 1 - 0
app/config/config.yml

@@ -17,6 +17,7 @@ framework:
     session:
         name: packagist
         cookie_lifetime: 3600
+        cookie_httponly: true
     trusted_proxies: %trusted_proxies%
     trusted_hosts: %trusted_hosts%
     http_method_override: true