mirror of
https://github.com/lunaisnotaboy/mastodon.git
synced 2024-12-22 21:26:52 +00:00
3f8523130d
"headers" is provided by Rails, Rack can't rely on it
26 lines
658 B
Ruby
26 lines
658 B
Ruby
# frozen_string_literal: true
|
|
|
|
module ActionDispatch
|
|
module CookieJarExtensions
|
|
private
|
|
|
|
# Monkey-patch ActionDispatch to serve secure cookies to Tor Hidden Service
|
|
# users. Otherwise, ActionDispatch would drop the cookie over HTTP.
|
|
def write_cookie?(*)
|
|
request.host.ends_with?('.onion') || super
|
|
end
|
|
end
|
|
end
|
|
|
|
ActionDispatch::Cookies::CookieJar.prepend(ActionDispatch::CookieJarExtensions)
|
|
|
|
module Rack
|
|
module SessionPersistedExtensions
|
|
def security_matches?(request, options)
|
|
request.host.ends_with?('.onion') || super
|
|
end
|
|
end
|
|
end
|
|
|
|
Rack::Session::Abstract::Persisted.prepend(Rack::SessionPersistedExtensions)
|