From 845b7f5360a8fa0e8d5099292527a432665082bf Mon Sep 17 00:00:00 2001 From: Kyle M Hall Date: Tue, 4 Jan 2022 10:24:18 -0500 Subject: [PATCH] Bug 29791: KohaOpacLanguage cookie should set the secure flag if using https To test, the headers should have value set-cookie: secure; for the language cookie, when the site is using https. Signed-off-by: Katrin Fischer --- C4/Templates.pm | 1 + 1 file changed, 1 insertion(+) diff --git a/C4/Templates.pm b/C4/Templates.pm index d41c9b534e..64f5d1f482 100644 --- a/C4/Templates.pm +++ b/C4/Templates.pm @@ -343,6 +343,7 @@ sub getlanguagecookie { -value => $language, -HttpOnly => 1, -expires => '+3y' + -secure => ( C4::Context->https_enabled() ? 1 : 0 ), ); return $cookie; -- 2.30.2