Add SameSite setting for cookies and rationalise the cookie setting code. Switches SameSite to Lax by default. There is a possible future extension of differentiating which cookies could be set at Strict by default but that is for a future PR. Fix #5583 Signed-off-by: Andrew Thornton <art27@cantab.net> |
||
|---|---|---|
| .. | ||
| attachment.go | ||
| cache.go | ||
| cors.go | ||
| cron.go | ||
| cron_test.go | ||
| database.go | ||
| database_sqlite.go | ||
| database_test.go | ||
| git.go | ||
| indexer.go | ||
| indexer_test.go | ||
| lfs.go | ||
| log.go | ||
| mailer.go | ||
| markup.go | ||
| migrations.go | ||
| picture.go | ||
| project.go | ||
| queue.go | ||
| repository.go | ||
| service.go | ||
| session.go | ||
| setting.go | ||
| setting_test.go | ||
| storage.go | ||
| storage_test.go | ||
| task.go | ||
| webhook.go | ||