set security options on cookies (#2825)

kimai · Oct 7, 2021 · 84e2585 · 84e2585
1 parent 3a52dae
commit 84e2585
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/config/packages/framework.yaml b/config/packages/framework.yaml
@@ -12,6 +12,9 @@ framework:
 
     session:
         handler_id: App\Security\SessionHandler
+        cookie_secure: auto
+        cookie_httponly: true
+        cookie_samesite: lax
 
     #esi: ~
     #fragments: ~