From b06a481a0ff53e91f3b5d0aeb64d305c9b75b77f Mon Sep 17 00:00:00 2001 From: faul_sname Date: Sat, 31 Dec 2022 02:18:56 -0800 Subject: [PATCH] [themotte/rDrama#451] Ability to disable secure session cookie with env var --- files/__main__.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/files/__main__.py b/files/__main__.py index d7b33b9ca..52d1a0ce2 100644 --- a/files/__main__.py +++ b/files/__main__.py @@ -98,7 +98,7 @@ app.config['SEND_FILE_MAX_AGE_DEFAULT'] = 0 if app.debug else 3153600 app.config["SESSION_COOKIE_NAME"] = "session_" + environ.get("SITE_ID").strip().lower() app.config["VERSION"] = "1.0.0" app.config['MAX_CONTENT_LENGTH'] = 16 * 1024 * 1024 -app.config["SESSION_COOKIE_SECURE"] = "localhost" not in environ.get("DOMAIN") +app.config["SESSION_COOKIE_SECURE"] = bool(environ.get('SESSION_COOKIE_SECURE', "localhost" not in environ.get("DOMAIN"))) app.config["SESSION_COOKIE_SAMESITE"] = "Lax" app.config["PERMANENT_SESSION_LIFETIME"] = 60 * 60 * 24 * 365 app.config["DEFAULT_COLOR"] = environ.get("DEFAULT_COLOR", "ffffff").strip()