github/qBittorrent
1
0
Fork 0
mirror of https://github.com/qbittorrent/qBittorrent synced 2025-07-13 16:53:08 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions 9

Set "SameSite=None" if CSRF Protection is disabled

Browse source 
PR #18843.
This commit is contained in:
七海千秋 2023-04-16 19:27:49 +08:00 • committed by GitHub
parent eaee38a19e
commit 1e400df324
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
src/webui/webapplication.cpp
View file

@ -683,6 +683,8 @@ void WebApplication::sessionStart()
QByteArray cookieRawForm = cookie.toRawForm(); QByteArray cookieRawForm = cookie.toRawForm();
if (m_isCSRFProtectionEnabled) if (m_isCSRFProtectionEnabled)
cookieRawForm.append("; SameSite=Strict"); cookieRawForm.append("; SameSite=Strict");
else if (cookie.isSecure())
cookieRawForm.append("; SameSite=None");
setHeader({Http::HEADER_SET_COOKIE, QString::fromLatin1(cookieRawForm)}); setHeader({Http::HEADER_SET_COOKIE, QString::fromLatin1(cookieRawForm)});
} }