From 2935f221eaf7dc0e41cacf1bdcd81ad0dd77a0e0 Mon Sep 17 00:00:00 2001 From: alex-sig <143193681+alex-sig@users.noreply.github.com> Date: Thu, 4 Apr 2024 13:13:23 +0530 Subject: [PATCH] OTWO-7216 Use secure cookies in Prod (#1778) --- config/initializers/session_store.rb | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/config/initializers/session_store.rb b/config/initializers/session_store.rb index 0171c2dc6..8cde1e4af 100644 --- a/config/initializers/session_store.rb +++ b/config/initializers/session_store.rb @@ -2,4 +2,5 @@ # Be sure to restart your server when you modify this file. -Rails.application.config.session_store :cookie_store, key: '_ohloh-ui_session' +Rails.application.config.session_store :cookie_store, key: '_ohloh-ui_session', + secure: (Rails.env.staging? || Rails.env.production?)