From 2f48679b0b6157714208157795469b3122fe387b Mon Sep 17 00:00:00 2001
From: Lucas Smith <me@lucasjamessmith.me>
Date: Thu, 8 May 2025 15:59:43 +1000
Subject: [PATCH] fix: make lang cookie httpOnly (#1783)

---
 apps/remix/app/storage/lang-cookie.server.ts | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/apps/remix/app/storage/lang-cookie.server.ts b/apps/remix/app/storage/lang-cookie.server.ts
index 31a2c37aa..88982903b 100644
--- a/apps/remix/app/storage/lang-cookie.server.ts
+++ b/apps/remix/app/storage/lang-cookie.server.ts
@@ -1,6 +1,10 @@
 import { createCookie } from 'react-router';
 
+import { env } from '@documenso/lib/utils/env';
+
 export const langCookie = createCookie('lang', {
   path: '/',
   maxAge: 60 * 60 * 24 * 365 * 2,
+  httpOnly: true,
+  secure: env('NODE_ENV') === 'production',
 });