powerdns-admin/configs
corubba ae2ad6527a Set csrf cookie to httponly
The CSRF token is currently inserted directly in the template and not
in the browser via JavaScript from the cookie, so making it inaccessible
is not a problem.

The Sesson-cookie is already httponly by default [0].

[0] https://flask.palletsprojects.com/en/2.1.x/config/?highlight=session_cookie_httponly#SESSION_COOKIE_HTTPONLY
2022-06-18 18:51:42 +02:00
..
development.py Merge pull request #1205 from joshsol1/master 2022-06-18 13:39:01 +03:00
docker_config.py Set csrf cookie to httponly 2022-06-18 18:51:42 +02:00
test.py default config: add exemplary URL encoding step for SQLA DB URL params 2021-11-30 22:29:00 +01:00