diff --git a/Changelog.md b/Changelog.md
index c8bb217fd..cf7bb5a85 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -11,6 +11,7 @@
 ## Refactor
 * Indicate proper way to report bugs in the sidebar [#7039](https://github.com/diaspora/diaspora/pull/7039)
 * Remove text color from notification mails and fix sender avatar [#7054](https://github.com/diaspora/diaspora/pull/7054)
+* Make the session cookies HttpOnly again [#7041](https://github.com/diaspora/diaspora/pull/7041)
 
 ## Bug fixes
 
diff --git a/config/initializers/session_store.rb b/config/initializers/session_store.rb
index d2e9c4e29..06360f9d2 100644
--- a/config/initializers/session_store.rb
+++ b/config/initializers/session_store.rb
@@ -1,3 +1,3 @@
 # Be sure to restart your server when you modify this file.
 
-Diaspora::Application.config.session_store :cookie_store, key: '_diaspora_session', httponly: false
+Diaspora::Application.config.session_store :cookie_store, key: "_diaspora_session", httponly: true