We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 66c1b4e commit e69dc4dCopy full SHA for e69dc4d
README.md
@@ -32,9 +32,11 @@ All `nil` values will fallback to their default values. `SecureHeaders::OPT_OUT`
32
```ruby
33
SecureHeaders::Configuration.default do |config|
34
config.cookies = {
35
- secure: true, # mark all cookies as "secure"
36
- httponly: true, # mark all cookies as "httponly"
37
- samesite: true
+ secure: true, # mark all cookies as "Secure"
+ httponly: true, # mark all cookies as "HttpOnly"
+ samesite: {
38
+ strict: true # mark all cookies as SameSite=Strict
39
+ }
40
}
41
config.hsts = "max-age=#{20.years.to_i}; includeSubdomains; preload"
42
config.x_frame_options = "DENY"
0 commit comments