From c1e30c9a8449058d926c4d4a500ce457ef683909 Mon Sep 17 00:00:00 2001 From: Timo Gurr Date: Thu, 7 Jan 2021 14:40:24 +0100 Subject: [PATCH] Add secure/httpOnly attributes to the lang cookie (#9690) (#14279) --- routers/routes/macaron.go | 16 +++++++++------- 1 file changed, 9 insertions(+), 7 deletions(-) diff --git a/routers/routes/macaron.go b/routers/routes/macaron.go index 019b476e7..ca3599b7a 100644 --- a/routers/routes/macaron.go +++ b/routers/routes/macaron.go @@ -83,13 +83,15 @@ func NewMacaron() *macaron.Macaron { } m.Use(i18n.I18n(i18n.Options{ - SubURL: setting.AppSubURL, - Files: localFiles, - Langs: setting.Langs, - Names: setting.Names, - DefaultLang: "en-US", - Redirect: false, - CookieDomain: setting.SessionConfig.Domain, + SubURL: setting.AppSubURL, + Files: localFiles, + Langs: setting.Langs, + Names: setting.Names, + DefaultLang: "en-US", + Redirect: false, + CookieHttpOnly: true, + Secure: setting.SessionConfig.Secure, + CookieDomain: setting.SessionConfig.Domain, })) m.Use(cache.Cacher(cache.Options{ Adapter: setting.CacheService.Adapter,