fixup: some security stuff (#49)

2023-12-03 09:55:15 +01:00 · 2023-12-03 09:55:15 +01:00 · 150125aa68
parent f1cafc3f09 35144b34c2
commit 150125aa68
1 changed files with 3 additions and 0 deletions
--- a/src/lib/Server.js
+++ b/src/lib/Server.js
@ -31,6 +31,9 @@ module.exports = class Server {
        secret: crypto.randomBytes(256).toString('hex'),
        resave: true,
        saveUninitialized: true,
+        cookie: {
+          httpOnly: true,
+        },
      }))

      .get('/api/release', (Util.promisify(async () => {