cst1/openstreetmap-website
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Mark javascript issued cookies with SameSite=Lax

Browse source
This commit is contained in:
Tom Hughes 2021-05-17 19:06:43 +01:00
parent 32cc04fa5c
commit 0a15112423
2 changed files with 4 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

7
app/assets/javascripts/index.js
View file

@ -188,8 +188,7 @@ $(document).ready(function () {
map.getLayersCode(),
map._object);
Cookies.remove("_osm_location");
Cookies.set("_osm_location", OSM.locationCookie(map), { secure: true, expires: expiry, path: "/" });
Cookies.set("_osm_location", OSM.locationCookie(map), { secure: true, expires: expiry, path: "/", samesite: "lax" });
});
if (Cookies.get("_osm_welcome") !== "hide") {
@ -198,7 +197,7 @@ $(document).ready(function () {
$(".welcome .close").on("click", function () {
$(".welcome").removeClass("visible");
Cookies.set("_osm_welcome", "hide", { secure: true, expires: expiry, path: "/" });
Cookies.set("_osm_welcome", "hide", { secure: true, expires: expiry, path: "/", samesite: "lax" });
});
var bannerExpiry = new Date();
@ -209,7 +208,7 @@ $(document).ready(function () {
$("#banner").hide();
e.preventDefault();
if (cookieId) {
Cookies.set(cookieId, "hide", { secure: true, expires: bannerExpiry, path: "/" });
Cookies.set(cookieId, "hide", { secure: true, expires: bannerExpiry, path: "/", samesite: "lax" });
}
});