]> source.dussan.org Git - gitea.git/commit
Add SameSite setting for cookies (#14900)
authorzeripath <art27@cantab.net>
Sun, 7 Mar 2021 08:12:43 +0000 (08:12 +0000)
committerGitHub <noreply@github.com>
Sun, 7 Mar 2021 08:12:43 +0000 (08:12 +0000)
commit9b261f52f074fcc11fd705dae63084364c4f7adf
tree587521b6929105a76b288a962316504380c1c494
parentbeed5476e2831f7a0943d484873f4f49dfdd256f
Add SameSite setting for cookies (#14900)

Add SameSite setting for cookies and rationalise the cookie setting code. Switches SameSite to Lax by default.

There is a possible future extension of differentiating which cookies could be set at Strict by default but that is for a future PR.

Fix #5583

Signed-off-by: Andrew Thornton <art27@cantab.net>
14 files changed:
custom/conf/app.example.ini
docs/content/doc/advanced/config-cheat-sheet.en-us.md
modules/auth/sso/sso.go
modules/context/auth.go
modules/context/context.go
modules/context/csrf.go
modules/setting/session.go
modules/web/middleware/cookie.go
modules/web/middleware/locale.go
routers/home.go
routers/install.go
routers/user/auth.go
routers/user/auth_openid.go
routers/user/setting/profile.go