Merge pull request #55 from maykinmedia/feature/45-same-site-options

🔧[#45] add CSRF_COOKIE_HTTPONLY setting
maykinmedia · Aug 20, 2024 · ac17e91 · ac17e91
2 parents 802cb98 + 4ee7dc7
commit ac17e91
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/open_api_framework/conf/base.py b/open_api_framework/conf/base.py
@@ -552,6 +552,7 @@
 )
 
 CSRF_COOKIE_SECURE = IS_HTTPS
+CSRF_COOKIE_HTTPONLY = True
 CSRF_COOKIE_SAMESITE = config(
     "CSRF_COOKIE_SAMESITE",
     "Strict",