Explorar o código

HUE-4466 [security] deliver csrftoken cookie with secure bit set if possible.

Prakash Ranade %!s(int64=9) %!d(string=hai) anos
pai
achega
e1f30dc
Modificáronse 1 ficheiros con 2 adicións e 0 borrados
  1. 2 0
      desktop/core/src/desktop/settings.py

+ 2 - 0
desktop/core/src/desktop/settings.py

@@ -350,6 +350,8 @@ SESSION_EXPIRE_AT_BROWSER_CLOSE = desktop.conf.SESSION.EXPIRE_AT_BROWSER_CLOSE.g
 # HTTP only
 SESSION_COOKIE_HTTPONLY = desktop.conf.SESSION.HTTP_ONLY.get()
 
+CSRF_COOKIE_SECURE = desktop.conf.SESSION.SECURE.get()
+
 SECURE_HSTS_SECONDS = desktop.conf.SECURE_HSTS_SECONDS.get()
 SECURE_HSTS_INCLUDE_SUBDOMAINS = desktop.conf.SECURE_HSTS_INCLUDE_SUBDOMAINS.get()
 SECURE_CONTENT_TYPE_NOSNIFF = desktop.conf.SECURE_CONTENT_TYPE_NOSNIFF.get()