mastodon/config/initializers/session_store.rb

mirror of https://github.com/mastodon/mastodon synced 2024-12-24 11:38:18 +09:00
# Be sure to restart your server when you modify this file.

Rails.application.config.session_store :cookie_store, key: '_mastodon_session', secure: (ENV['LOCAL_HTTPS'] == 'true')
Initial commit 2016-02-21 06:53:20 +09:00			`# Be sure to restart your server when you modify this file.`

Make cookies https-only if LOCAL_HTTPS is true, set X-Frame-Options to DENY, add permissive CORS to API controllers 2016-11-02 20:57:14 +09:00			`Rails.application.config.session_store :cookie_store, key: '_mastodon_session', secure: (ENV['LOCAL_HTTPS'] == 'true')`