refactor: cookir开启httponly

2025-06-20 13:43:20 +08:00
parent 4f3c5fdee2
commit e7a232ac9c
1 changed files with 2 additions and 2 deletions
--- a/config/cookie.php
+++ b/config/cookie.php
@@ -12,9 +12,9 @@ return [
    //  cookie 启用安全传输
    'secure'    => false,
    // httponly设置
-    'httponly'  => false,
+    'httponly'  => true,
    // 是否使用 setcookie
    'setcookie' => true,
    // samesite 设置，支持 'strict' 'lax'
-    'samesite'  => '',
+    'samesite'  => 'strict',
 ];