bors[bot] 464e46b02b Merge #1765 ...

1765: Set sensible cookie flags on the admin app r=mergify[bot] a=nextgens

## What type of PR?

Bugfix

## What does this PR do?

It sets the right flags on the session cookie issued by the admin app.
This should probably be backported as the lack of secure flag on TLS-enabled setup is a high risk vulnerability.

SameSite is hardening / helps against CSRF on modern browsers
HTTPOnly is hardening / helps reduce the impact of XSS

Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>

2021-03-09 09:25:04 +00:00

..

_templates

Restore VERSION_TAG template

2018-12-30 15:07:45 +02:00

assets

removing unneeded image

2020-11-17 11:41:01 -06:00

compose

Fixing documentation minor typo

2020-08-23 20:21:14 -04:00

contributors

fixed workflow example in documentation

2020-08-26 10:35:03 +02:00

kubernetes

Update webmail.yaml

2020-07-14 14:24:37 +02:00

swarm

add some docs about _FILE variables

2020-08-30 01:14:47 +02:00

.env

Add deploy settings for server

2018-12-17 00:12:21 +02:00

antispam.rst

Add documentation for the web administration gui.

2020-08-18 20:42:58 +02:00

cli.rst

Docs: fix some build warnings

2019-08-27 10:34:46 +03:00

conf.py

Completely remove step 5 where you can set the replica count for docker-stack.

2020-10-04 13:22:59 +00:00

configuration.rst

Add a new knob as discussed on matrix with lub

2021-03-05 22:26:46 +01:00

database.rst

Update database.rst

2019-12-30 15:10:26 +01:00

demo.rst

Fixed small typo

2020-01-11 10:13:53 +01:00

dns.rst

Update docs/dns.rst

2019-11-18 21:40:58 +01:00

docker-compose.yml

Make docker-compose.yml for setup and docs development friendly

2019-01-16 20:50:52 +02:00

Dockerfile

Docs: treat warnings as errors

2019-10-21 15:18:53 +03:00

faq.rst

Merge #1711 #1712

2021-03-08 10:10:52 +00:00

features.rst

remove service status "feature"

2020-11-11 12:10:41 -06:00

general.rst

Fix the rst syntax for most documentation

2017-11-02 20:05:12 +01:00

index.rst

Add documentation for the web administration gui.

2020-08-18 20:42:58 +02:00

maintain.rst

Include a doc section for external certbot

2018-10-13 20:59:14 +03:00

nginx.conf

Build the documentation as a Docker image

2018-09-28 10:41:17 +02:00

releases.rst

rewording about the usage of PostgreSQL

2021-01-22 05:29:54 +01:00

requirements.txt

Revert "Add a Dockerfile for buliding the docs"

2018-10-01 12:07:49 +03:00

reverse.rst

add warning about removing front

2020-11-15 14:22:00 +01:00

rpi_build.rst

RPi: update doc (alpine version + variables)

2019-10-09 12:17:40 -04:00

setup.rst

Preparations for 1.8 release.

2020-10-01 20:32:05 +02:00

webadministration.rst

Update docs/webadministration.rst

2020-09-26 10:19:48 +02:00