SUP-14730: Use HttpOnly cookie flag - Githubissues

gentics / mesh

Gentics Mesh - The open source headless CMS for developers

https://getmesh.io

Apache License 2.0

571 stars 115 forks source link

SUP-14730: Use HttpOnly cookie flag #1598

Open plyhun opened 6 months ago

plyhun commented 6 months ago

Abstract

Potential XSS attacks prevention.

Checklist

General

[x] Added abstract that describes the change
[x] Added changelog entry to /CHANGELOG.adoc
[x] Ensured that the change is covered by tests
[x] Ensured that the change is documented in the docs

On API Changes

[x] Checked if the changes are breaking or not
[x] Added GraphQL API if applicable
[x] Added Elasticsearch mapping if applicable