added secure cookies settings

2025-01-06 18:52:43 +01:00 · 2025-01-06 18:52:43 +01:00 · 0851e9e9f2
commit 0851e9e9f2
parent 3d893ad94d
1 changed files with 3 additions and 2 deletions
--- a/user-settings.go
+++ b/user-settings.go
@ -72,8 +72,9 @@ func saveUserSettings(w http.ResponseWriter, settings UserSettings) {
 			Value:    cd.GetValue(settings),
 			Path:     "/",
 			Expires:  expiration,
-			Secure:   true,
-			SameSite: http.SameSiteStrictMode,
+			Secure:   true, // Ensure HTTPS is required
+			HttpOnly: true,
+			SameSite: http.SameSiteStrictMode, // Restrict cross-site usage
 		})
 	}