Merge pull request #55 from maykinmedia/feature/45-same-site-options

Coperh · web-flow · commit ac17e919e356 · 2024-08-20T16:28:02.000+02:00
🔧[#45] add CSRF_COOKIE_HTTPONLY setting
diff --git a/open_api_framework/conf/base.py b/open_api_framework/conf/base.py
@@ -552,6 +552,7 @@
 )
 
 CSRF_COOKIE_SECURE = IS_HTTPS
+CSRF_COOKIE_HTTPONLY = True
 CSRF_COOKIE_SAMESITE = config(
     "CSRF_COOKIE_SAMESITE",
     "Strict",
