From b9cee4ba3c5e22766de771edde2b8d523ee84993 Mon Sep 17 00:00:00 2001 From: Stan Hu Date: Thu, 30 Aug 2018 13:39:56 -0700 Subject: Set issuable_sort and diff_view cookies to secure when possible Closes #49120 --- app/helpers/cookies_helper.rb | 9 +++++++++ 1 file changed, 9 insertions(+) create mode 100644 app/helpers/cookies_helper.rb (limited to 'app/helpers/cookies_helper.rb') diff --git a/app/helpers/cookies_helper.rb b/app/helpers/cookies_helper.rb new file mode 100644 index 00000000000..3a7e9987190 --- /dev/null +++ b/app/helpers/cookies_helper.rb @@ -0,0 +1,9 @@ +# frozen_string_literal: true + +module CookiesHelper + def set_secure_cookie(key, value, httponly: false, permanent: false) + cookie_jar = permanent ? cookies.permanent : cookies + + cookie_jar[key] = { value: value, secure: Gitlab.config.gitlab.https, httponly: httponly } + end +end -- cgit v1.2.3