Mirrors/gitea
0
0 Fork 0
mirror of https://github.com/go-gitea/gitea.git synced 2026-10-06 18:57:34 +02:00
Code Issues Activity

Make cookies HttpOnly and obey COOKIE_SECURE flag (#4706)

Browse Source
This commit is contained in:
SagePtr authored and Lauris BH committed 2018-08-14 23:16:37 +03:00
1 parent ca112f0a04
commit 0449330dbc
4 files changed
+26 -25
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

routers/routes/routes.go
+7 -6
View File
@@ -116,12 +116,13 @@ func NewMacaron() *macaron.Macaron {
}))
m.Use(session.Sessioner(setting.SessionConfig))
m.Use(csrf.Csrfer(csrf.Options{
Secret: setting.SecretKey,
Cookie: setting.CSRFCookieName,
SetCookie: true,
Secure: setting.SessionConfig.Secure,
Header: "X-Csrf-Token",
CookiePath: setting.AppSubURL,
Secret: setting.SecretKey,
Cookie: setting.CSRFCookieName,
SetCookie: true,
Secure: setting.SessionConfig.Secure,
CookieHttpOnly: true,
Header: "X-Csrf-Token",
CookiePath: setting.AppSubURL,
}))
m.Use(toolbox.Toolboxer(m, toolbox.Options{
HealthCheckFuncs: []*toolbox.HealthCheckFuncDesc{