b1-66er/microblog.pub
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Set Secure Flag On Cookie When Served As HTTPS

Browse Source 
See also: https://flask.palletsprojects.com/en/1.1.x/security/#set-cookie-options
This commit is contained in:
hiromi-mi
2020-06-07 20:12:13 +09:00
parent 8df0ddb03a
commit 0c9fb36c91
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
app.py
View File

@@ -93,6 +93,9 @@ app.register_blueprint(blueprints.indieauth.blueprint)
app.register_blueprint(blueprints.tasks.blueprint) app.register_blueprint(blueprints.tasks.blueprint)
app.register_blueprint(blueprints.well_known.blueprint) app.register_blueprint(blueprints.well_known.blueprint)
app.config.update(WTF_CSRF_CHECK_DEFAULT=False) app.config.update(WTF_CSRF_CHECK_DEFAULT=False)
app.config.update(SESSION_COOKIE_SECURE=True if config.SCHEME == "https" else False)
csrf.init_app(app) csrf.init_app(app)
logger = logging.getLogger(__name__) logger = logging.getLogger(__name__)