Explicitly mark as not HttpOnly

opral · Jun 7, 2024 · 1ea7b14 · 1ea7b14
1 parent b0dcc28
commit 1ea7b14
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/.changeset/tricky-elephants-matter.md b/.changeset/tricky-elephants-matter.md
@@ -0,0 +1,5 @@
+---
+"@inlang/paraglide-sveltekit": patch
+---
+
+Explicitly mark `paraglide:lang` cookie as _not_ `HttpOnly`.
diff --git a/inlang/source-code/paraglide/paraglide-sveltekit/src/runtime/hooks/handle.ts b/inlang/source-code/paraglide/paraglide-sveltekit/src/runtime/hooks/handle.ts
@@ -90,6 +90,7 @@ export const createHandle = <T extends string>(
 				maxAge: 31557600, //Math.round(60 * 60 * 24 * 365.25) = 1 year,
 				sameSite: "lax",
 				path: base || "/",
+				httpOnly: false,
 			})
 		}