From 3661c687f0c54bd9f4e1075aa651bc612d634a13 Mon Sep 17 00:00:00 2001 From: Jan Tuomi Date: Thu, 29 Feb 2024 18:09:26 +0200 Subject: Set attributes on HTTP cookies --- app.py | 15 ++++++++++----- 1 file changed, 10 insertions(+), 5 deletions(-) diff --git a/app.py b/app.py index 6e575de..3cf9e71 100644 --- a/app.py +++ b/app.py @@ -79,7 +79,8 @@ def create(): resp = make_response( redirect(f"/manage/{poll.manage_code}") ) - resp.set_cookie(f"diddle_manage_code_{poll.manage_code}", "1") + resp.set_cookie(f"diddle_manage_code_{poll.manage_code}", "1", + samesite="Strict", secure=False) return resp @@ -119,7 +120,8 @@ def poll(id): now=datetime.datetime.now(), display_mode=display_mode)) - resp.set_cookie("diddle_display_mode", display_mode) + resp.set_cookie("diddle_display_mode", display_mode, + samesite="Lax", secure=False) return resp @@ -218,7 +220,8 @@ def manage(code): render_template("manage.html.j2", poll=poll, last_choice_id=last_choice_id)) - resp.set_cookie(f"diddle_manage_code_{code}", "1") + resp.set_cookie(f"diddle_manage_code_{code}", "1", + samesite="Strict", secure=False) return resp @app.post("/manage//delete") @@ -230,7 +233,8 @@ def delete_poll(code): def confirm_delete_poll(code): db.delete_poll(code) resp = make_response(redirect("/")) - resp.set_cookie(f"diddle_manage_code_{code}", "", expires=0) + resp.set_cookie(f"diddle_manage_code_{code}", "", expires=0, + samesite="Strict", secure=False) return resp @app.post("/options/toggle_display_mode") @@ -244,5 +248,6 @@ def toggle_display_mode(): display_mode = "table" resp = make_response(redirect(redirect_url)) - resp.set_cookie("diddle_display_mode", display_mode) + resp.set_cookie("diddle_display_mode", display_mode, + samesite="Lax", secure=False) return resp -- cgit v1.3