indymedia
/
epicyon
mirror of https://gitlab.com/bashrc2/epicyon
7
4
Fork 1
Code Issues 14 Releases Wiki Activity

Set-Cookie security

main
Bob Mottram 2020-06-21 11:44:57 +00:00
parent ea7f6964ad
commit 48fbbe9247
1 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
daemon.py
View File

@ -567,8 +567,11 @@ class PubServer(BaseHTTPRequestHandler):
if not cookie.startswith('SET:'): if not cookie.startswith('SET:'):
self.send_header('Cookie', cookie) self.send_header('Cookie', cookie)
else: else:
self.send_header('Set-Cookie', setCookieStr = cookie.replace('SET:', '').strip()
cookie.replace('SET:', '').strip()) if self.server.httpPrefix == 'https':
setCookieStr += '; Secure'
setCookieStr += '; HttpOnly; SameSite=Strict'
self.send_header('Set-Cookie', setCookieStr)
self.send_header('Location', redirect) self.send_header('Location', redirect)
self.send_header('Host', callingDomain) self.send_header('Host', callingDomain)
self.send_header('InstanceID', self.server.instanceId) self.send_header('InstanceID', self.server.instanceId)