Content-Length: 796 | pFad | http://github.com/coder/coder/pull/18989.diff
thub.com diff --git a/coderd/workspaceapps/provider.go b/coderd/workspaceapps/provider.go index 1cd652976f6f4..227ced556365a 100644 --- a/coderd/workspaceapps/provider.go +++ b/coderd/workspaceapps/provider.go @@ -77,10 +77,11 @@ func ResolveRequest(rw http.ResponseWriter, r *http.Request, opts ResolveRequest // For subdomain apps, this applies to the entire subdomain, e.g. // app--agent--workspace--user.apps.example.com http.SetCookie(rw, opts.CookieCfg.Apply(&http.Cookie{ - Name: codersdk.SignedAppTokenCookie, - Value: tokenStr, - Path: appReq.BasePath, - Expires: token.Expiry.Time(), + Name: codersdk.SignedAppTokenCookie, + Value: tokenStr, + Path: appReq.BasePath, + HttpOnly: true, + Expires: token.Expiry.Time(), })) return token, trueFetched URL: http://github.com/coder/coder/pull/18989.diff
Alternative Proxies: