diff --git a/roles/badges/frontend/templates/tahrir.ini b/roles/badges/frontend/templates/tahrir.ini
index 5a8667ee29..37b97d9144 100644
--- a/roles/badges/frontend/templates/tahrir.ini
+++ b/roles/badges/frontend/templates/tahrir.ini
@@ -56,6 +56,7 @@ tahrir.openid_realm = https://badges.fedoraproject.org
 tahrir.websocket.topic = org.fedoraproject.prod.fedbadges.badge.award
 {% endif %}
 tahrir.secure_cookies = True
+tahrir.httponly_cookies = True
 tahrir.allow_changenick = False
 
 # Only allow @fedoraproject.org emails