Category: web

This app uses Flask’s signed client-side session cookies. That’s fine **only if** `app.secret_key` is secret.