Skip to content
This repository has been archived by the owner on Feb 6, 2024. It is now read-only.

Http Only TGT Cookies #172

Open
wants to merge 2 commits into
base: master
Choose a base branch
from
Open

Http Only TGT Cookies #172

wants to merge 2 commits into from

Commits on Sep 19, 2016

  1. Make the generated cookies httponly 

    The tgt cookie should be httponly to mitigate some common XSS attacks.
https://www.owasp.org/index.php/HttpOnly#Mitigating_the_Most_Common_XSS_attack_using_HttpOnly
    @fojas @soupmatt
    fojas authored and soupmatt committed Sep 19, 2016
    Configuration menu
    Copy the full SHA
    f4a3517 View commit details
    Browse the repository at this point in the history

  2. Make the httponly-ness of the cookies configurable 

    default the configuration to false so that the default behavior matches
the previous behavior.
    @soupmatt
    soupmatt committed Sep 19, 2016
    Configuration menu
    Copy the full SHA
    44833d7 View commit details
    Browse the repository at this point in the history