diff options
| author | Aleksandr Bulyshchenko <A.Bulyshchenko@globallogic.com> | 2018-05-22 02:09:48 +0300 |
|---|---|---|
| committer | Lauris BH <lauris@nix.lv> | 2018-05-22 02:09:48 +0300 |
| commit | ee878e3951d059363a1538a94d14576af8e7f83c (patch) | |
| tree | d9c84611272ea3651b40609cc0c51541e4e652b9 /Gopkg.lock | |
| parent | 31067c0a890cdbf81ea1c696601995f1806ce3a8 (diff) | |
| download | gitea-ee878e3951d059363a1538a94d14576af8e7f83c.tar.gz gitea-ee878e3951d059363a1538a94d14576af8e7f83c.zip | |
Support secure cookie for csrf-token (#3839)
* dep: Update github.com/go-macaron/csrf
Update github.com/go-macaron/csrf with dep to revision 503617c6b372
to fix issue of csrf-token security.
This update includes following commits:
- Add support for the Cookie HttpOnly flag
- Support secure mode for csrf cookie
Signed-off-by: Aleksandr Bulyshchenko <A.Bulyshchenko@globallogic.com>
* routers: set csrf-token security depending on COOKIE_SECURE
Signed-off-by: Aleksandr Bulyshchenko <A.Bulyshchenko@globallogic.com>
Diffstat (limited to 'Gopkg.lock')
| -rw-r--r-- | Gopkg.lock | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/Gopkg.lock b/Gopkg.lock index 147b63fdda..9e1adb1947 100644 --- a/Gopkg.lock +++ b/Gopkg.lock @@ -254,9 +254,10 @@ revision = "8aa5919789ab301e865595eb4b1114d6b9847deb" [[projects]] + branch = "master" name = "github.com/go-macaron/csrf" packages = ["."] - revision = "6a9a7df172cc1fcd81e4585f44b09200b6087cc0" + revision = "503617c6b37257a55dff6293ec28556506c3a9a8" [[projects]] branch = "master" |