PMCORE-3466:Cookie No HttpOnly Flag - Telefonica of Guatemala Security Analysis (Issue Rep# 4)

Correction
2021-12-14 17:18:37 -04:00
parent 2acaad3a43
commit dd0894e967
2 changed files with 2 additions and 2 deletions
--- a/workflow/engine/src/ProcessMaker/Core/System.php
+++ b/workflow/engine/src/ProcessMaker/Core/System.php
@@ -94,7 +94,7 @@ class System
        'path' => '/',
        'domain' => '',
        'secure' => false,
-        'httponly' => false,
+        'httponly' => true,
        'samesite' => ''
    ];