mirrors/nadeko_invidious
1
0
Fork 0
mirror of https://git.nadeko.net/Fijxu/invidious.git synced 2025-06-28 01:48:26 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

cookies: remove port number from domain if it exists
Some checks are pending
Invidious CI / lint (push) Waiting to run
Details
Build and release container directly from master / release (push) Waiting to run
Details
Invidious CI / build - crystal: ${{ matrix.crystal }}, stable: ${{ matrix.stable }} (1.12.1, true) (push) Waiting to run
Details
Invidious CI / build - crystal: ${{ matrix.crystal }}, stable: ${{ matrix.stable }} (1.13.2, true) (push) Waiting to run
Details
Invidious CI / build - crystal: ${{ matrix.crystal }}, stable: ${{ matrix.stable }} (1.14.0, true) (push) Waiting to run
Details
Invidious CI / build - crystal: ${{ matrix.crystal }}, stable: ${{ matrix.stable }} (1.15.0, true) (push) Waiting to run
Details
Invidious CI / build - crystal: ${{ matrix.crystal }}, stable: ${{ matrix.stable }} (nightly, false) (push) Waiting to run
Details
Invidious CI / build-docker (push) Waiting to run
Details
Invidious CI / build-docker-arm64 (push) Waiting to run
Details

Browse Source
This commit is contained in:
Fijxu 2025-03-31 00:25:32 -03:00
parent 642b2e8bf0
commit be9a3794e9
No known key found for this signature in database
GPG Key ID: 32C1DDF333EDA6A4
1 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
src/invidious/user/cookies.cr
View File

@ -11,6 +11,10 @@ struct Invidious::User
# Session ID (SID) cookie # Session ID (SID) cookie
# Parameter "domain" comes from the global config # Parameter "domain" comes from the global config
def sid(domain : String?, sid) : HTTP::Cookie def sid(domain : String?, sid) : HTTP::Cookie
# Strip the port from the domain if it's being accessed from another port
# Browsers will reject the cookie if it contains the port number. This is
# because `example.com:3000` is not the same as `example.com` on a cookie.
domain = domain.split(":")[0]
# Not secure if it's being accessed from I2P # Not secure if it's being accessed from I2P
# Browsers expect the domain to include https. On I2P there is no HTTPS # Browsers expect the domain to include https. On I2P there is no HTTPS
if domain.not_nil!.split(".").last == "i2p" if domain.not_nil!.split(".").last == "i2p"
@ -30,6 +34,10 @@ struct Invidious::User
# Preferences (PREFS) cookie # Preferences (PREFS) cookie
# Parameter "domain" comes from the global config # Parameter "domain" comes from the global config
def prefs(domain : String?, preferences : Preferences) : HTTP::Cookie def prefs(domain : String?, preferences : Preferences) : HTTP::Cookie
# Strip the port from the domain if it's being accessed from another port
# Browsers will reject the cookie if it contains the port number. This is
# because `example.com:3000` is not the same as `example.com` on a cookie.
domain = domain.split(":")[0]
# Not secure if it's being accessed from I2P # Not secure if it's being accessed from I2P
# Browsers expect the domain to include https. On I2P there is no HTTPS # Browsers expect the domain to include https. On I2P there is no HTTPS
if domain.not_nil!.split(".").last == "i2p" if domain.not_nil!.split(".").last == "i2p"
@ -53,6 +61,8 @@ struct Invidious::User
server_id = rand(CONFIG.invidious_companion.size) server_id = rand(CONFIG.invidious_companion.size)
end end
# Strip the port from the domain if it's being accessed from another port # Strip the port from the domain if it's being accessed from another port
# Browsers will reject the cookie if it contains the port number. This is
# because `example.com:3000` is not the same as `example.com` on a cookie.
domain = domain.split(":")[0] domain = domain.split(":")[0]
# Not secure if it's being accessed from I2P # Not secure if it's being accessed from I2P
# Browsers expect the domain to include https. On I2P there is no HTTPS # Browsers expect the domain to include https. On I2P there is no HTTPS