b1-66er/microblog.pub
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #82 from hiromi-mi/make_session_cookie_secure

Browse Source 
Set Secure Flag On Cookie When Served As HTTPS
This commit is contained in:
Thomas Sileo
2020-06-12 09:02:11 +02:00
committed by GitHub
parent 8df0ddb03a 0c9fb36c91
commit 8903a1f56a
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
app.py
View File

@@ -93,6 +93,9 @@ app.register_blueprint(blueprints.indieauth.blueprint)
app.register_blueprint(blueprints.tasks.blueprint) app.register_blueprint(blueprints.tasks.blueprint)
app.register_blueprint(blueprints.well_known.blueprint) app.register_blueprint(blueprints.well_known.blueprint)
app.config.update(WTF_CSRF_CHECK_DEFAULT=False) app.config.update(WTF_CSRF_CHECK_DEFAULT=False)
app.config.update(SESSION_COOKIE_SECURE=True if config.SCHEME == "https" else False)
csrf.init_app(app) csrf.init_app(app)
logger = logging.getLogger(__name__) logger = logging.getLogger(__name__)