slight change to make our cookie even more insecure

2014-06-27 12:05:50 -04:00
parent c8e48e1c3c
commit 2a12765933
1 changed files with 1 additions and 1 deletions
@@ -1,6 +1,6 @@
 # Be sure to restart your server when you modify this file.

-Railsgoat::Application.config.session_store :cookie_store, key: '_railsgoat_session'
+Railsgoat::Application.config.session_store :cookie_store, key: '_railsgoat_session', httponly: false

 # Use the database for sessions instead of the cookie-based default,
 # which shouldn't be used to store highly confidential information