Be sure the cookie is always using SSL, even temporarily
This commit is contained in:
parent
e3c08808f5
commit
eb4960a401
1 changed files with 1 additions and 1 deletions
|
@ -105,7 +105,7 @@ PAGURE_AUTH = 'fas'
|
||||||
# This may be set to False when testing your application but should always
|
# This may be set to False when testing your application but should always
|
||||||
# be set to True in production.
|
# be set to True in production.
|
||||||
# Default: ``True``.
|
# Default: ``True``.
|
||||||
SESSION_COOKIE_SECURE = False
|
SESSION_COOKIE_SECURE = True
|
||||||
|
|
||||||
# The name of the cookie used to store the session id.
|
# The name of the cookie used to store the session id.
|
||||||
# Default: ``.pagure``.
|
# Default: ``.pagure``.
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue