How to enable the httpOnly attribute for current_user Cookie

Archives AWX Project
1

Hi,

I am using AWX 15.0.0.
In our Pen testing we found the vulnerability: HTTPOnly and Secure attributes are not set for Cookies
I was able to enable to Secure attribute by adding these changes in the “settings.py” file.

settings.py

CSRF_COOKIE_SECURE= True
SESSION_COOKIE_SECURE= True