This commit is contained in:
Manuel Friedli 2014-01-22 22:20:16 +01:00
parent 99e1a4fe85
commit 874fb33268
3 changed files with 14 additions and 1 deletions

View file

@ -0,0 +1,11 @@
--- config/initializers/session_store.rb.broken 2014-01-22 22:15:38.530000000 +0100
+++ config/initializers/session_store.rb 2014-01-22 22:06:53.020000000 +0100
@@ -4,7 +4,7 @@
:redis_store, # Using the cookie_store would enable session replay attacks.
servers: Gitlab::Application.config.cache_store.last, # re-use the Redis config from the Rails cache store
key: '_gitlab_session',
- secure: Gitlab.config.gitlab.https,
+ secure: Gitlab::Application.config.force_ssl,
httponly: true,
path: (Rails.application.config.relative_url_root.nil?) ? '/' : Rails.application.config.relative_url_root
)