diff --git a/config/session.php b/config/session.php
index f1b00421..fbe8084d 100644
--- a/config/session.php
+++ b/config/session.php
@@ -149,5 +149,6 @@
     */
 
     'secure' => false,
+    'http_only' => true,
 
 ];