Consider setting HttpOnly cookie flag for webadmin session cookie #570

Closed
opened 2026-10-05 04:30:32 +02:00 by adam · 0 comments
Owner

Hi,

if there is no need to access the session cookie via JavaScript please consider to set the https://www.owasp.org/index.php/HttpOnly cookie flag the same way as already did with the "Secure" flag in https://github.com/znc/znc/pull/391

Hi, if there is no need to access the session cookie via JavaScript please consider to set the https://www.owasp.org/index.php/HttpOnly cookie flag the same way as already did with the "Secure" flag in https://github.com/znc/znc/pull/391 <!-- github-sync-id:105907042 -->
adam closed this issue 2026-10-05 04:30:32 +02:00
Sign in to join this conversation.
No labels
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: adam/znc#570