Use http-only cookie for session
This commit is contained in:
parent
e5a9035a61
commit
0b92a7fd6c
1 changed files with 1 additions and 1 deletions
|
@ -73,7 +73,7 @@ module Kemal
|
|||
id = SecureRandom.hex
|
||||
end
|
||||
|
||||
ctx.response.cookies[NAME] = id
|
||||
ctx.response.cookies << HTTP::Cookie.new(name: NAME, value: id, http_only: true)
|
||||
@id = id
|
||||
end
|
||||
|
||||
|
|
Loading…
Reference in a new issue