Unfloyded/Legamunt
0
0
Fork 0
Code Activity

Fix cookies secure flag being set when served over Tor (#17992)

Browse source
This commit is contained in:
Eugen Rochko 2022-04-08 12:47:18 +02:00 • committed by GitHub
parent 46633f1de1
commit 6e418bf346
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
4 changed files with 2 additions and 30 deletions
Download patch file Download diff file Expand all files Collapse all files

2
config/initializers/session_store.rb
View file

@ -2,5 +2,5 @@
Rails.application.config.session_store :cookie_store,
key: '_mastodon_session',
secure: (Rails.env.production? || ENV['LOCAL_HTTPS'] == 'true'),
secure: false, # All cookies have their secure flag set by the force_ssl option in production
same_site: :lax