wiki-cafe
/
wiki-security-passportjs
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

set cookie `sameSite`

This commit is contained in:
Paul Rodwell 2020-06-18 14:35:17 +01:00
parent c85474aae7
commit 230ed1c707
No known key found for this signature in database
GPG Key ID: 083BA337597C49E6
2 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
client/security.coffee
View File

@ -72,7 +72,7 @@ update_footer = (ownerName, isAuthenticated) ->
if response.ok
window.isAuthenticated = false
user = ''
document.cookie = "state=loggedOut" + ";domain=." + settings.cookieDomain + "; path=/; max-age=60;"
document.cookie = "state=loggedOut" + ";domain=." + settings.cookieDomain + "; path=/; max-age=60; sameSite=Strict;"
update_footer ownerName, isAuthenticated
else
console.log 'logout failed: ', response
@ -89,7 +89,7 @@ update_footer = (ownerName, isAuthenticated) ->
$('footer > #security > #addAltAuth').click (e) ->
e.preventDefault
document.cookie = "wikiName=#{window.location.host}" + ";domain=.#{settings.cookieDomain}; path=/; max-age=300;"
document.cookie = "wikiName=#{window.location.host}" + ";domain=.#{settings.cookieDomain}; path=/; max-age=300; sameSite=Strict;"
w = WinChan.open({
url: settings.dialogAddAltURL
@ -138,7 +138,7 @@ update_footer = (ownerName, isAuthenticated) ->
$('footer > #security > #show-security-dialog').click (e) ->
e.preventDefault()
document.cookie = "wikiName=#{window.location.host}" + ";domain=.#{settings.cookieDomain}; path=/; max-age=300;"
document.cookie = "wikiName=#{window.location.host}" + ";domain=.#{settings.cookieDomain}; path=/; max-age=300; sameSite=Strict;"
w = WinChan.open({
url: settings.dialogURL

2
views/done.html
View File

@ -43,7 +43,7 @@
<script src="/security/winchan.js"></script>
<script>
document.cookie = "state=loggedIn" + ";domain=." + window.location.hostname + "; path=/; max-age=60;"
document.cookie = "state=loggedIn" + ";domain=." + window.location.hostname + "; path=/; max-age=60; sameSite=Strict;"
var wc = WinChan.onOpen(function(origin, r, cb) {
cb({
done: true,