Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add httpOnly option to detectBrowserLanguage configuration in i18n #3059

Open
3 of 4 tasks
hoythan opened this issue Aug 13, 2024 · 1 comment · May be fixed by #3060
Open
3 of 4 tasks

Add httpOnly option to detectBrowserLanguage configuration in i18n #3059

hoythan opened this issue Aug 13, 2024 · 1 comment · May be fixed by #3060

Comments

@hoythan
Copy link

hoythan commented Aug 13, 2024

Describe the feature

The @nuxtjs/i18n module currently lacks the option to set the httpOnly flag on cookies used by the detectBrowserLanguage feature. This omission leads to security warnings in vulnerability scans, particularly when deploying sites on platforms like Google Ads, which highlight the absence of the httpOnly flag as a potential security risk. Implementing this feature would enhance security by protecting cookies from being accessed through client-side scripts.

image

Additional information

  • Would you be willing to help implement this feature?
  • Could this feature be implemented as a module?

Final checks

@younho9
Copy link

younho9 commented Nov 6, 2024

What if make useCookie fully customizable?

In my case, I would like to use the decode / encode option.

But the decode / encode option can't be set in nuxt.config because it can't be serialized.

It would be nice to be able to use a custom useCookie in getI18nCookie.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants