artin/API-Explorer
1
0
Fork 0
mirror of https://github.com/OpenBankProject/API-Explorer.git synced 2026-02-06 10:47:23 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #231 from constantine2nd/develop

Browse Source 
Add props set_response_header_Set-Cookie
This commit is contained in:
Simon Redfern 2023-11-15 08:00:44 +01:00 committed by GitHub
commit 76f26037d0
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 14 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/main/resources/props/sample.props.template
View File

@ -185,4 +185,6 @@ session_inactivity_timeout_in_minutes = 30
# Please note that depricated name ot this props is: language_tag
default_locale = en_GB
default_locale = en_GB
set_response_header_Set-Cookie = "Path=/; HttpOnly; Secure"

11
src/main/scala/bootstrap/liftweb/Boot.scala
View File

@ -247,5 +247,16 @@ class Boot extends MdcLoggable{
// Do not change default value
}
val setCookieHeader: (String, String) = Props.get("set_response_header_Set-Cookie") match {
case Full(value) => ("Set-Cookie", value)
case _ => ("Set-Cookie", "Path=/; HttpOnly; Secure")
}
//for XSS vulnerability, set X-Frame-Options header as DENY
LiftRules.supplementalHeaders.default.set(
("X-Frame-Options", "DENY") ::
setCookieHeader ::
Nil
)
}
}