diff --git a/open_api_framework/conf/base.py b/open_api_framework/conf/base.py index 0d45134..a44f3e6 100644 --- a/open_api_framework/conf/base.py +++ b/open_api_framework/conf/base.py @@ -552,6 +552,7 @@ ) CSRF_COOKIE_SECURE = IS_HTTPS +CSRF_COOKIE_HTTPONLY = True CSRF_COOKIE_SAMESITE = config( "CSRF_COOKIE_SAMESITE", "Strict",