Monkey patch Rack::Session to send secure cookies to onions (mastodon…

…#15725)
hachyderm · Feb 13, 2021 · 3447bd2 · 3447bd2
1 parent 5aa66fc
commit 3447bd2
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/lib/action_dispatch/cookie_jar_extensions.rb b/lib/action_dispatch/cookie_jar_extensions.rb
@@ -13,3 +13,13 @@ def write_cookie?(*)
 end
 
 ActionDispatch::Cookies::CookieJar.prepend(ActionDispatch::CookieJarExtensions)
+
+module Rack
+  module SessionPersistedExtensions
+    def security_matches?(request, options)
+      request.headers['Host'].ends_with?('.onion') || super
+    end
+  end
+end
+
+Rack::Session::Abstract::Persisted.prepend(Rack::SessionPersistedExtensions)