From c1e30c9a8449058d926c4d4a500ce457ef683909 Mon Sep 17 00:00:00 2001
From: Timo Gurr <timo.gurr@gmail.com>
Date: Thu, 7 Jan 2021 14:40:24 +0100
Subject: [PATCH] Add secure/httpOnly attributes to the lang cookie (#9690)
(#14279)
---
routers/routes/macaron.go | 16 +++++++++-------
1 file changed, 9 insertions(+), 7 deletions(-)
diff --git a/routers/routes/macaron.go b/routers/routes/macaron.go
index 019b476e71..ca3599b7a0 100644
--- a/routers/routes/macaron.go
+++ b/routers/routes/macaron.go
@@ -83,13 +83,15 @@ func NewMacaron() *macaron.Macaron {
}
m.Use(i18n.I18n(i18n.Options{
- SubURL: setting.AppSubURL,
- Files: localFiles,
- Langs: setting.Langs,
- Names: setting.Names,
- DefaultLang: "en-US",
- Redirect: false,
- CookieDomain: setting.SessionConfig.Domain,
+ SubURL: setting.AppSubURL,
+ Files: localFiles,
+ Langs: setting.Langs,
+ Names: setting.Names,
+ DefaultLang: "en-US",
+ Redirect: false,
+ CookieHttpOnly: true,
+ Secure: setting.SessionConfig.Secure,
+ CookieDomain: setting.SessionConfig.Domain,
}))
m.Use(cache.Cacher(cache.Options{
Adapter: setting.CacheService.Adapter,