#485: HttpOnly for cookies

to improve security
nzbget · Jan 25, 2018 · cf0d086 · cf0d086
1 parent bf53c6e
commit cf0d086
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/daemon/remote/WebServer.cpp b/daemon/remote/WebServer.cpp
@@ -466,7 +466,7 @@ void WebProcessor::SendBodyResponse(const char* body, int bodyLen, const char* c
 		"Access-Control-Max-Age: 86400\r\n"
 		"Access-Control-Allow-Headers: Content-Type, Authorization\r\n"
 		"Set-Cookie: Auth-Type=%s\r\n"
-		"Set-Cookie: Auth-Token=%s\r\n"
+		"Set-Cookie: Auth-Token=%s; HttpOnly\r\n"
 		"Content-Length: %i\r\n"
 		"%s"					// Content-Type: xxx
 		"%s"					// Content-Encoding: gzip