From c346aae0eb16b1f33eca1e512291464e82cac6d2 Mon Sep 17 00:00:00 2001 From: Nikolai Tretiak Date: Wed, 3 Jan 2024 09:10:51 +0100 Subject: [PATCH] Insecure CSRF cookie --- server/commands.go | 3 +++ 1 file changed, 3 insertions(+) diff --git a/server/commands.go b/server/commands.go index aee850bd..9af1bffa 100644 --- a/server/commands.go +++ b/server/commands.go @@ -245,6 +245,9 @@ func NewServerCommands(defaultCfg *sconfig.Config) []*cli.Command { Codec: uiconfig.Codec{ Endpoint: uiCodecEndpoint, }, + CORS: uiconfig.CORS{ + CookieInsecure: true, + }, } opt, err := newUIOption(uiBaseCfg)