routers: set csrf-token security depending on COOKIE_SECURE

Signed-off-by: Aleksandr Bulyshchenko <[email protected]>
go-gitea · Apr 30, 2018 · 409cf99 · 409cf99
1 parent be39cca
commit 409cf99
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/routers/routes/routes.go b/routers/routes/routes.go
@@ -114,6 +114,7 @@ func NewMacaron() *macaron.Macaron {
 		Secret:     setting.SecretKey,
 		Cookie:     setting.CSRFCookieName,
 		SetCookie:  true,
+		Secure:     setting.SessionConfig.Secure,
 		Header:     "X-Csrf-Token",
 		CookiePath: setting.AppSubURL,
 	}))