Skip to content
Snippets Groups Projects
Verified Commit 65d838be authored by nd's avatar nd
Browse files

added CSRF cookie protection

parent 10e1fd9b
No related branches found
No related tags found
No related merge requests found
...@@ -12,6 +12,11 @@ LDAP_USER_MIN_UID=10000 ...@@ -12,6 +12,11 @@ LDAP_USER_MIN_UID=10000
LDAP_USER_MAX_UID=18999 LDAP_USER_MAX_UID=18999
SESSION_LIFETIME_SECONDS=3600 SESSION_LIFETIME_SECONDS=3600
# CSRF protection
SESSION_COOKIE_SECURE=True
SESSION_COOKIE_HTTPONLY=True
SESSION_COOKIE_SAMESITE='Strict'
ACL_ADMIN_GROUP="uffd_admin" ACL_ADMIN_GROUP="uffd_admin"
ACL_SELFSERVICE_GROUP="uffd_access" ACL_SELFSERVICE_GROUP="uffd_access"
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment