feat: enable partitioned session cookies for enhanced security

This commit is contained in:
Théophile Diot 2024-12-04 11:01:53 +01:00
parent 7c71fe32f0
commit 35d61bb898
No known key found for this signature in database
GPG key ID: FA995104A0BA376A

View file

@ -80,6 +80,7 @@ with app.app_context():
app.config["SESSION_COOKIE_NAME"] = "__Host-bw_ui_session"
app.config["SESSION_COOKIE_PATH"] = "/"
app.config["SESSION_COOKIE_SECURE"] = True
app.config["SESSION_COOKIE_PARTITIONED"] = True
app.config["SESSION_COOKIE_HTTPONLY"] = True
app.config["SESSION_COOKIE_SAMESITE"] = "Lax"