Unfloyded/Legamunt
0
0
Fork 0
Code Activity

Make cookies https-only if LOCAL_HTTPS is true, set X-Frame-Options to DENY,

Browse source 
add permissive CORS to API controllers
This commit is contained in:
Eugen Rochko 2016-11-02 12:57:14 +01:00
parent 0a6b5e2c17
commit 9467b900a2
3 changed files with 13 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
config/initializers/session_store.rb
View file

@ -1,3 +1,3 @@
# Be sure to restart your server when you modify this file.
Rails.application.config.session_store :cookie_store, key: '_mastodon_session'
Rails.application.config.session_store :cookie_store, key: '_mastodon_session', secure: (ENV['LOCAL_HTTPS'] == 'true')