Skip to content

Add httpOnly option to detectBrowserLanguage configuration in i18n #3059

@hoythan

Description

@hoythan

Describe the feature

The @nuxtjs/i18n module currently lacks the option to set the httpOnly flag on cookies used by the detectBrowserLanguage feature. This omission leads to security warnings in vulnerability scans, particularly when deploying sites on platforms like Google Ads, which highlight the absence of the httpOnly flag as a potential security risk. Implementing this feature would enhance security by protecting cookies from being accessed through client-side scripts.

image

Additional information

  • Would you be willing to help implement this feature?
  • Could this feature be implemented as a module?

Final checks

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions