session-middleware v0.4.0
·
3 commits
to main
since this release
Minor Changes
- BREAKING CHANGE: Session cookies now default to
HttpOnlywhen the cookie'shttpOnlyoption is omitted. SethttpOnly: falseexplicitly to preserve access from client-side JavaScript; the middleware emits a warning when this protection is disabled.
Patch Changes
- Bumped
@remix-run/*dependencies: