inventree/InvenTree
2
0
Fork 0
mirror of https://github.com/inventree/InvenTree.git synced 2025-04-28 11:36:44 +00:00
Code

Samesite cookie fix (#8262)

Browse Source 
- Closes https://github.com/inventree/InvenTree/issues/8254
This commit is contained in:
Oliver 2024-10-09 23:10:01 +11:00 committed by GitHub
parent dde6aab8b4
commit 8e34fddfaa
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 2 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
src/backend/InvenTree/InvenTree/settings.py
View File

@ -1098,13 +1098,9 @@ COOKIE_MODE = (
.strip()
)
valid_cookie_modes = {'lax': 'Lax', 'strict': 'Strict', 'none': None, 'null': None}
valid_cookie_modes = {'lax': 'Lax', 'strict': 'Strict', 'none': 'None', 'null': 'None'}
if COOKIE_MODE not in valid_cookie_modes:
logger.error('Invalid cookie samesite mode: %s', COOKIE_MODE)
sys.exit(-1)
COOKIE_MODE = valid_cookie_modes[COOKIE_MODE.lower()]
COOKIE_MODE = valid_cookie_modes.get(COOKIE_MODE.lower(), 'None')
# Additional CSRF settings
CSRF_HEADER_NAME = 'HTTP_X_CSRFTOKEN'