squidy/qBittorrent
1
0
Fork 0
mirror of https://github.com/qbittorrent/qBittorrent.git synced 2025-12-18 22:47:21 -06:00
Code Issues Packages Projects Releases Wiki Activity

Set "SameSite=None" if CSRF Protection is disabled

Browse Source 
PR #18843.
This commit is contained in:
七海千秋
2023-04-16 19:27:49 +08:00
committed by GitHub
parent eaee38a19e
commit 1e400df324
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
src/webui/webapplication.cpp
View File

@@ -683,6 +683,8 @@ void WebApplication::sessionStart()
QByteArray cookieRawForm = cookie.toRawForm(); QByteArray cookieRawForm = cookie.toRawForm();
if (m_isCSRFProtectionEnabled) if (m_isCSRFProtectionEnabled)
cookieRawForm.append("; SameSite=Strict"); cookieRawForm.append("; SameSite=Strict");
else if (cookie.isSecure())
cookieRawForm.append("; SameSite=None");
setHeader({Http::HEADER_SET_COOKIE, QString::fromLatin1(cookieRawForm)}); setHeader({Http::HEADER_SET_COOKIE, QString::fromLatin1(cookieRawForm)});
} }