fix(security): restore default value of SESSION_COOKIE_SECURE to False (

#26005) (cherry picked from commit bba7763)
apache · Dec 4, 2023 · 0c0bb50 · 0c0bb50
1 parent 44fb6b5
commit 0c0bb50
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/superset/config.py b/superset/config.py
@@ -1426,6 +1426,7 @@ def EMAIL_HEADER_MUTATOR(  # pylint: disable=invalid-name,unused-argument
     },
     "content_security_policy_nonce_in": ["script-src"],
     "force_https": False,
+    "session_cookie_secure": False,
 }
 # React requires `eval` to work correctly in dev mode
 TALISMAN_DEV_CONFIG = {
@@ -1447,6 +1448,7 @@ def EMAIL_HEADER_MUTATOR(  # pylint: disable=invalid-name,unused-argument
     },
     "content_security_policy_nonce_in": ["script-src"],
     "force_https": False,
+    "session_cookie_secure": False,
 }
 
 #