Make CSRF cookie http only

This commit is contained in:
Frank Wiles
2023-04-28 13:38:05 -05:00
parent b68559a8f4
commit 7cc358c153

View File

@@ -93,6 +93,7 @@ INSTALLED_APPS += [
INSTALLED_APPS += ["ak", "users", "versions", "libraries", "mailing_list"]
AUTH_USER_MODEL = "users.User"
CSRF_COOKIE_HTTPONLY = True
MIDDLEWARE = [
"tracer.middleware.RequestID",