fix: use the base_url as a domain when creating a session cookie if a cookie domain is empty

This commit is contained in:
Tomasz Sowa 2022-09-28 19:28:17 +02:00
parent 3855ea9fa7
commit 8edd0ef07a
1 changed files with 6 additions and 1 deletions

View File

@ -2162,13 +2162,18 @@ void Request::AddCookie(
void Request::AddDefaultSessionCookie(const std::wstring & value, pt::Date * expires)
{
std::wstring * domain = &config->session_cookie_domain;
if( domain->empty() )
domain = &config->base_url;
AddCookie(
config->session_cookie_name,
&value,
nullptr,
expires,
&config->session_cookie_path,
&config->session_cookie_domain,
domain,
static_cast<CookieSameSite>(config->session_cookie_same_site),
config->session_cookie_http_only,
config->session_cookie_secure