Set cookie to http only

2024-08-13 11:39:19 -04:00 · 2024-08-13 11:39:19 -04:00 · 56f98a9c14
commit 56f98a9c14
parent 4cf50a7d81
1 changed files with 4 additions and 3 deletions
--- a/controllers/users.go
+++ b/controllers/users.go
@ -60,9 +60,10 @@ func (u Users) PostSignin(w http.ResponseWriter, r *http.Request) {

 	// Bad cookie
 	cookie := http.Cookie{
-		Name:  "bad",
-		Value: user.Email,
-		Path:  "/",
+		Name:     "bad",
+		Value:    user.Email,
+		Path:     "/",
+		HttpOnly: true,
 	}
 	http.SetCookie(w, &cookie)