diff options
author | Sheogorath | 2020-06-08 15:11:17 +0200 |
---|---|---|
committer | Sheogorath | 2020-06-08 16:09:49 +0200 |
commit | 383d791a50919bb9890a3f3f797ecc95125ab8bf (patch) | |
tree | dc0f3696daafa1e3d45834adf4507270a0bea90f /public/codimd-icon-1024.png | |
parent | 49de5f5bd6239354d98b424804951974588ab25e (diff) |
Ensure session cookies are secure
While HSTS should take care of most of this, setting cookies to be
secure, and only applied on same site helps to improve situations where
for whatever reason, downgrade attacks are still a thing.
This patch adds the `sameSite` and `secure` to the session cookie and
this way prevent all accidents where a browser may doesn't support HSTS
or HSTS is intentionally dropped.
Reference:
https://www.npmjs.com/package/express-session#cookiesecure
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
Diffstat (limited to 'public/codimd-icon-1024.png')
0 files changed, 0 insertions, 0 deletions