diff options
| author | Ran Benita <ran234@gmail.com> | 2019-04-01 12:29:10 +0300 |
|---|---|---|
| committer | Mariusz Felisiak <felisiak.mariusz@gmail.com> | 2019-04-08 11:26:06 +0200 |
| commit | 19fc6376ce67d01ca37a91ef2f55ef769f50513a (patch) | |
| tree | a40bb59e08bec7f9c6358d078a7e3157760b7993 /django | |
| parent | cef3f2d3c64055c9fc1757fd61dba24b557a2add (diff) | |
Fixed #30304 -- Added support for the HttpOnly, SameSite, and Secure flags on language cookies.
Diffstat (limited to 'django')
| -rw-r--r-- | django/conf/global_settings.py | 3 | ||||
| -rw-r--r-- | django/views/i18n.py | 3 |
2 files changed, 6 insertions, 0 deletions
diff --git a/django/conf/global_settings.py b/django/conf/global_settings.py index dd368584e5..61d08ddba5 100644 --- a/django/conf/global_settings.py +++ b/django/conf/global_settings.py @@ -154,6 +154,9 @@ LANGUAGE_COOKIE_NAME = 'django_language' LANGUAGE_COOKIE_AGE = None LANGUAGE_COOKIE_DOMAIN = None LANGUAGE_COOKIE_PATH = '/' +LANGUAGE_COOKIE_SECURE = False +LANGUAGE_COOKIE_HTTPONLY = False +LANGUAGE_COOKIE_SAMESITE = None # If you set this to True, Django will format dates, numbers and calendars diff --git a/django/views/i18n.py b/django/views/i18n.py index ce5691632c..e3ef40b2fc 100644 --- a/django/views/i18n.py +++ b/django/views/i18n.py @@ -55,6 +55,9 @@ def set_language(request): max_age=settings.LANGUAGE_COOKIE_AGE, path=settings.LANGUAGE_COOKIE_PATH, domain=settings.LANGUAGE_COOKIE_DOMAIN, + secure=settings.LANGUAGE_COOKIE_SECURE, + httponly=settings.LANGUAGE_COOKIE_HTTPONLY, + samesite=settings.LANGUAGE_COOKIE_SAMESITE, ) return response |