lub
/
mailu
1
0
Fork 0
Code Issues Pull Requests Packages Releases Wiki Activity
You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
main
dynamic-resolution
master
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from '464e46b02b'
${ noResults }
mailu/core/admin
History
bors[bot] 464e46b02b
Merge #1765 
1765: Set sensible cookie flags on the admin app r=mergify[bot] a=nextgens

## What type of PR?

Bugfix

## What does this PR do?

It sets the right flags on the session cookie issued by the admin app.
This should probably be backported as the lack of secure flag on TLS-enabled setup is a high risk vulnerability.

SameSite is hardening / helps against CSRF on modern browsers
HTTPOnly is hardening / helps reduce the impact of XSS

Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
 		4 years ago
..
assets add app.css and fix align of menu button 5 years ago
mailu Merge #1765 4 years ago
migrations Fix typo in migration file 6 years ago
.gitignore Move all directories per theme 7 years ago
Dockerfile Switching to alpine:3.12 4 years ago
README.md Move all directories per theme 7 years ago
audit.py Move all directories per theme 7 years ago
babel.cfg Move all directories per theme 7 years ago
messages.pot Remove services status localization 7 years ago
package.json Expose jQuery for use outside Webpack build 5 years ago
requirements-prod.txt Bump cryptography from 2.6.1 to 3.2 in /core/admin 4 years ago
requirements.txt Merge #1349 5 years ago
start.py Enable access log of admin service only for log levels of INFO and finer 5 years ago
webpack.config.js Expose jQuery for use outside Webpack build 5 years ago

README.md

Mailu Admin container

This is the web-based administrative interface for the Mailu containerized mail server.

Resources