Authored by 徐炜

httponly session

Showing 1 changed file with 1 additions and 1 deletions
... ... @@ -63,7 +63,7 @@ app.use(session({
name: 'yohoblk-session',
cookie: {
domain: config.cookieDomain,
httpOnly: false
httpOnly: true
},
store: new MemcachedStore({
hosts: config.memcache.session,
... ...