mark redirect_to cookie as http only

closes #10829
This commit is contained in:
bergquist 2018-02-15 10:56:29 +01:00
parent aa902ef826
commit 0ab0343995

View File

@ -51,7 +51,8 @@ func notAuthorized(c *Context) {
return
}
c.SetCookie("redirect_to", url.QueryEscape(setting.AppSubUrl+c.Req.RequestURI), 0, setting.AppSubUrl+"/")
c.SetCookie("redirect_to", url.QueryEscape(setting.AppSubUrl+c.Req.RequestURI), 0, setting.AppSubUrl+"/", nil, false, true)
c.Redirect(setting.AppSubUrl + "/login")
}