Project

General

Profile

« Previous | Next » 

Revision 0b03b9bd

Added by Shlomi Zadok about 9 years ago

fixes #10275 - Add secure cookie when in ssl (CVE-2015-3155)

View differences:

app/assets/javascripts/application.js
password_caps_lock_hint();
var tz = jstz.determine();
$.cookie('timezone', tz.name(), { path: '/' });
$.cookie('timezone', tz.name(), { path: '/', secure: location.protocol === 'https:' });
}
function preserve_selected_options(elem) {

Also available in: Unified diff