From: Paul Hänsch <paul@plutz.net>
Date: Sun, 18 Nov 2018 19:47:10 +0000 (+0100)
Subject: make session cookies http only
X-Git-Url: http://git.plutz.net/?p=cgilite;a=commitdiff_plain;h=41bcab02ff4b11d22a2624e7afabc50e9c33ae2f

make session cookies http only
---

diff --git a/session.sh b/session.sh
index 2769328..3f3839a 100755
--- a/session.sh
+++ b/session.sh
@@ -64,5 +64,5 @@ update_session(){
 }
 
 SESSION_ID="$(update_session)"
-SET_COOKIE 0 "session=$SESSION_ID"
+SET_COOKIE 0 "session=$SESSION_ID" HttpOnly
 SESSION_ID="${SESSION_ID%%-*}"