cst1/openstreetmap-website
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Tighten up cookie security

Browse source 
Mark all cookies as Secure, and the cookies which are not
modified client side as HttpOnly.
This commit is contained in:
Tom Hughes 2021-02-19 18:18:13 +00:00
parent 56a2aa8efa
commit f91dd6afc2
3 changed files with 4 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

2
app/assets/javascripts/index/directions.js
View file

@ -334,7 +334,7 @@ OSM.Directions = function (map) {
select.on("change", function (e) {
chosenEngine = engines[e.target.selectedIndex];
$.cookie("_osm_directions_engine", chosenEngine.id, { expires: expiry, path: "/" });
$.cookie("_osm_directions_engine", chosenEngine.id, { secure: true, expires: expiry, path: "/" });
getRoute(true, true);
});