From 8edd0ef07acc10ed1c732c8d4ad3030cf4d9518a Mon Sep 17 00:00:00 2001
From: Tomasz Sowa <t.sowa@ttmath.org>
Date: Wed, 28 Sep 2022 19:28:17 +0200
Subject: [PATCH] fix: use the base_url as a domain when creating a session
 cookie if a cookie domain is empty

---
 winixd/core/request.cpp | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/winixd/core/request.cpp b/winixd/core/request.cpp
index 266057d..ed2c3f5 100644
--- a/winixd/core/request.cpp
+++ b/winixd/core/request.cpp
@@ -2162,13 +2162,18 @@ void Request::AddCookie(
 
 void Request::AddDefaultSessionCookie(const std::wstring & value, pt::Date * expires)
 {
+	std::wstring * domain = &config->session_cookie_domain;
+
+	if( domain->empty() )
+		domain = &config->base_url;
+
 	AddCookie(
 		config->session_cookie_name,
 		&value,
 		nullptr,
 		expires,
 		&config->session_cookie_path,
-		&config->session_cookie_domain,
+		domain,
 		static_cast<CookieSameSite>(config->session_cookie_same_site),
 		config->session_cookie_http_only,
 		config->session_cookie_secure