Update Cookie Settings Secure, httpOnly, sameSite
This commit is contained in:
parent
b65f165dcf
commit
e526deac20
@ -1,11 +1,25 @@
|
||||
var Oqtane = Oqtane || {};
|
||||
|
||||
Oqtane.Interop = {
|
||||
setCookie: function (name, value, days) {
|
||||
setCookie: function (name, value, days, secure, httpOnly, sameSite) {
|
||||
var d = new Date();
|
||||
d.setTime(d.getTime() + (days * 24 * 60 * 60 * 1000));
|
||||
var expires = "expires=" + d.toUTCString();
|
||||
document.cookie = name + "=" + value + ";" + expires + ";path=/";
|
||||
var cookieString = name + "=" + value + ";" + expires + ";path=/";
|
||||
|
||||
// Add SameSite attribute
|
||||
if (sameSite === "Lax" || sameSite === "Strict" || sameSite === "None") {
|
||||
cookieString += `; SameSite=${sameSite}`;
|
||||
}
|
||||
|
||||
// Add Secure attribute
|
||||
if (secure) {
|
||||
cookieString += "; Secure";
|
||||
}
|
||||
|
||||
// Note: HttpOnly cannot be set here; it needs to be handled server-side.
|
||||
|
||||
document.cookie = cookieString;
|
||||
},
|
||||
getCookie: function (name) {
|
||||
name = name + "=";
|
||||
|
Reference in New Issue
Block a user