diff --git a/config.py b/config.py
index 2419e97..0b3e32a 100644
--- a/config.py
+++ b/config.py
@@ -4,6 +4,10 @@ basedir = os.path.abspath(os.path.dirname(__file__))
 
 
 class Config:
+
+    SESSION_COOKIE_HTTPONLY = True
+    SESSION_COOKIE_SAMESITE = "Lax"  # działa w HTTP i HTTPS
+    
     SECRET_KEY = os.environ.get("SECRET_KEY", "D8pceNZ8q%YR7^7F&9wAC2")
 
     DB_ENGINE = os.environ.get("DB_ENGINE", "sqlite").lower()