Tech Insights· docs.djangoproject.com
HTTPOnly flag on the session cookies helps to prevent XSSs from escalating to session hijack: #std:setting-SESSION_COOKIE_HTTPONLY
Shared by
- Security
- Web
All lessons
Book a call
Lessons like this one
shape how we build.
Tell us what you’re building. In one call, we’ll show you how our team would approach it.
Tell us what you’re building, and we’ll show you how we’d approach it.
Still prefer the good old email? Contact us
