github/reddit
1
1
Fork 0
mirror of https://github.com/reddit-archive/reddit.git synced 2026-01-30 01:08:32 -05:00
Code Issues Packages Projects Releases Wiki Activity

Make the admin cookie HTTP only.

Browse Source
This commit is contained in:
Max Goodman
2013-02-11 17:25:43 -08:00
parent 87bd576689
commit 74a7141a63
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
r2/r2/controllers/reddit_base.py
View File

@@ -894,7 +894,8 @@ class RedditController(MinimalController):
@staticmethod
def enable_admin_mode(user, first_login=None):
# no expiration time so the cookie dies with the browser session
c.cookies[g.admin_cookie] = Cookie(value=user.make_admin_cookie(first_login=first_login))
admin_cookie = user.make_admin_cookie(first_login=first_login)
c.cookies[g.admin_cookie] = Cookie(value=admin_cookie, httponly=True)
@staticmethod
def remember_otp(user):