kocoded/oqtane.framework
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update Cleanup "setCookie" function notes options: secure, httpOnly, Samesite

Browse Source
This commit is contained in:
Cody 2024-10-05 13:57:36 -07:00 committed by GitHub
parent dd0f8f4772
commit b5ea0dfbc7
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 0 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
Oqtane.Server/wwwroot/js/interop.js
View File

@ -6,19 +6,12 @@ Oqtane.Interop = {
d.setTime(d.getTime() + (days * 24 * 60 * 60 * 1000)); d.setTime(d.getTime() + (days * 24 * 60 * 60 * 1000));
var expires = "expires=" + d.toUTCString(); var expires = "expires=" + d.toUTCString();
var cookieString = name + "=" + value + ";" + expires + ";path=/"; var cookieString = name + "=" + value + ";" + expires + ";path=/";
// Add SameSite attribute
if (sameSite === "Lax" || sameSite === "Strict" || sameSite === "None") { if (sameSite === "Lax" || sameSite === "Strict" || sameSite === "None") {
cookieString += `; SameSite=${sameSite}`; cookieString += `; SameSite=${sameSite}`;
} }
// Add Secure attribute
if (secure) { if (secure) {
cookieString += "; Secure"; cookieString += "; Secure";
} }
// Note: HttpOnly cannot be set here; it needs to be handled server-side.
document.cookie = cookieString; document.cookie = cookieString;
}, },
getCookie: function (name) { getCookie: function (name) {