iv-org-mirror/invidious-copy-2022-08-14
1
0
Fork 0
mirror of https://gitea.invidious.io/iv-org/invidious-copy-2022-08-14.git synced 2024-08-15 00:53:20 +00:00
Code Issues Projects Releases Packages Wiki Activity

Add sameSite policy in cookie management in server side

Browse source
This commit is contained in:
Féry Mathieu (Mathius) 2022-02-22 18:57:21 +01:00
parent 8e4959a621
commit 09a585c93b
No known key found for this signature in database
GPG key ID: F9CCC80C18A59037
1 changed files with 4 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
src/invidious/user/cookies.cr
View file

@ -17,7 +17,8 @@ struct Invidious::User
value: sid, value: sid,
expires: Time.utc + 2.years, expires: Time.utc + 2.years,
secure: SECURE, secure: SECURE,
http_only: true http_only: true,
samesite: HTTP::Cookie::SameSite::Strict
) )
end end
@ -30,7 +31,8 @@ struct Invidious::User
value: URI.encode_www_form(preferences.to_json), value: URI.encode_www_form(preferences.to_json),
expires: Time.utc + 2.years, expires: Time.utc + 2.years,
secure: SECURE, secure: SECURE,
http_only: false http_only: false,
samesite: HTTP::Cookie::SameSite::Strict
) )
end end
end end