iv-org
/
invidious
mirror of https://github.com/iv-org/invidious.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Add sameSite policy in cookie management in server side

This commit is contained in:
Féry Mathieu (Mathius) 2022-02-22 18:57:21 +01:00
parent 8e4959a621
commit 09a585c93b
No known key found for this signature in database
GPG Key ID: F9CCC80C18A59037
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
src/invidious/user/cookies.cr
View File

@ -17,7 +17,8 @@ struct Invidious::User
value: sid, value: sid,
expires: Time.utc + 2.years, expires: Time.utc + 2.years,
secure: SECURE, secure: SECURE,
http_only: true http_only: true,
samesite: HTTP::Cookie::SameSite::Strict
) )
end end
@ -30,7 +31,8 @@ struct Invidious::User
value: URI.encode_www_form(preferences.to_json), value: URI.encode_www_form(preferences.to_json),
expires: Time.utc + 2.years, expires: Time.utc + 2.years,
secure: SECURE, secure: SECURE,
http_only: false http_only: false,
samesite: HTTP::Cookie::SameSite::Strict
) )
end end
end end