fixup: some security stuff

1 year ago · 35144b34c2
1 changed files with 3 additions and 0 deletions
--- a/src/lib/Server.js
+++ b/src/lib/Server.js
@ -31,6 +31,9 @@ module.exports = class Server {
        secret: crypto.randomBytes(256).toString('hex'),
        resave: true,
        saveUninitialized: true,
+        cookie: {
+          httpOnly: true,
+        },
      }))

      .get('/api/release', (Util.promisify(async () => {