set security options on cookies (#2825)

2021-10-07 12:40:06 +02:00
parent 3a52daedab
commit 84e25851d3
1 changed files with 3 additions and 0 deletions
--- a/config/packages/framework.yaml
+++ b/config/packages/framework.yaml
@@ -12,6 +12,9 @@ framework:

    session:
        handler_id: App\Security\SessionHandler
+        cookie_secure: auto
+        cookie_httponly: true
+        cookie_samesite: lax

    #esi: ~
    #fragments: ~