go-packages/iris
1
0
Fork 0
mirror of https://github.com/kataras/iris.git synced 2025-02-02 15:30:36 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

minor: sessions: set SameSite to Lax when sharable with subdomains is not disabled.

Browse Source 
Former-commit-id: d0b15433d5f325f24972669b485be9cf5be6d68a
This commit is contained in:
Gerasimos (Makis) Maropoulos 2019-08-16 12:41:20 +03:00
parent aee0503913
commit db433f7dca
4 changed files with 7 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
_examples/file-server/embedding-files-into-app/main_test.go
View File

@ -54,7 +54,7 @@ func (r resource) loadFromBase(dir string) string {
result := string(b)
if runtime.GOOS != "windows" {
// result = strings.Replace(result, "\n", "\r\n", -1)
result = strings.Replace(result, "\n", "\r\n", -1)
}
return result
}

2
_examples/file-server/embedding-gziped-files-into-app/main_test.go
View File

@ -55,7 +55,7 @@ func (r resource) loadFromBase(dir string) string {
result := string(b)
if runtime.GOOS != "windows" {
// result = strings.Replace(result, "\n", "\r\n", -1)
result = strings.Replace(result, "\n", "\r\n", -1)
}
return result
}

2
_examples/file-server/single-page-application/embedded-single-page-application/main_test.go
View File

@ -47,7 +47,7 @@ func (r resource) loadFromBase(dir string) string {
}
result := string(b)
if runtime.GOOS != "windows" {
// result = strings.Replace(result, "\n", "\r\n", -1)
result = strings.Replace(result, "\n", "\r\n", -1)
}
return result
}

4
sessions/sessions.go
View File

@ -45,6 +45,10 @@ func (s *Sessions) updateCookie(ctx context.Context, sid string, expires time.Du
cookie.Path = "/"
cookie.Domain = formatCookieDomain(ctx, s.config.DisableSubdomainPersistence)
cookie.HttpOnly = true
if !s.config.DisableSubdomainPersistence {
cookie.SameSite = http.SameSiteLaxMode // allow subdomain sharing.
}
// MaxAge=0 means no 'Max-Age' attribute specified.
// MaxAge<0 means delete cookie now, equivalently 'Max-Age: 0'
// MaxAge>0 means Max-Age attribute present and given in seconds