Set session secret for security purposes

lisahamm · Mar 24, 2015 · 070f378 · 070f378
1 parent 68a94fc
commit 070f378
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/tic_tac_toe_controller.rb b/tic_tac_toe_controller.rb
@@ -6,7 +6,11 @@
 
 
 class TicTacToeController < Sinatra::Base
-  enable :sessions
+  configure do
+    enable :sessions
+    set :session_secret, ENV['SESSION_SECRET'] || 'session secret'
+  end
+
   use Rack::Flash
   include GameHelpers