Use secure (HTTPOnly) cookies #10

Closed
opened 2017-07-16 21:21:38 +02:00 by albino · 2 comments
Owner

sweet sweet xss mitigation

sweet sweet xss mitigation
albino added the
improvement
security
labels 2017-07-16 21:21:38 +02:00
Author
Owner

fuck knows how I'm going to do this

fuck knows how I'm going to do this
Author
Owner

Turns out this was down to a bug in Dancer. The http_only => 1 bit could be removed once we update to a newer version of Dancer2.

Fixed in c0ba0c5c7b

Turns out this was down to a bug in Dancer. The `http_only => 1` bit could be removed once we update to a newer version of Dancer2. Fixed in https://git.fuwafuwa.moe/.cyb/cyberman/commit/c0ba0c5c7b647b5fd9dc33117deda675bbb400be
Sign in to join this conversation.
No Milestone
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: .cyb/cyberman#10
No description provided.