Pārlūkot izejas kodu

HUE-4466 [security] deliver csrftoken cookie with secure bit set if possible.

Prakash Ranade 9 gadi atpakaļ
vecāks
revīzija
e1f30dcb25
1 mainītis faili ar 2 papildinājumiem un 0 dzēšanām
  1. 2 0
      desktop/core/src/desktop/settings.py

+ 2 - 0
desktop/core/src/desktop/settings.py

@@ -350,6 +350,8 @@ SESSION_EXPIRE_AT_BROWSER_CLOSE = desktop.conf.SESSION.EXPIRE_AT_BROWSER_CLOSE.g
 # HTTP only
 SESSION_COOKIE_HTTPONLY = desktop.conf.SESSION.HTTP_ONLY.get()
 
+CSRF_COOKIE_SECURE = desktop.conf.SESSION.SECURE.get()
+
 SECURE_HSTS_SECONDS = desktop.conf.SECURE_HSTS_SECONDS.get()
 SECURE_HSTS_INCLUDE_SUBDOMAINS = desktop.conf.SECURE_HSTS_INCLUDE_SUBDOMAINS.get()
 SECURE_CONTENT_TYPE_NOSNIFF = desktop.conf.SECURE_CONTENT_TYPE_NOSNIFF.get()