From 35d61bb898331dd00775dabeec22b16b8aabeebf Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Th=C3=A9ophile=20Diot?= Date: Wed, 4 Dec 2024 11:01:53 +0100 Subject: [PATCH] feat: enable partitioned session cookies for enhanced security --- src/ui/main.py | 1 + 1 file changed, 1 insertion(+) diff --git a/src/ui/main.py b/src/ui/main.py index f161ce717..ff38bd082 100644 --- a/src/ui/main.py +++ b/src/ui/main.py @@ -80,6 +80,7 @@ with app.app_context(): app.config["SESSION_COOKIE_NAME"] = "__Host-bw_ui_session" app.config["SESSION_COOKIE_PATH"] = "/" app.config["SESSION_COOKIE_SECURE"] = True + app.config["SESSION_COOKIE_PARTITIONED"] = True app.config["SESSION_COOKIE_HTTPONLY"] = True app.config["SESSION_COOKIE_SAMESITE"] = "Lax"