pretix_original

CGM_Public/pretix_original

Fork 1

mirror of https://github.com/pretix/pretix.git synced 2026-05-22 18:04:16 +00:00

Author	SHA1	Message	Date
luelista	7237ece1ca	Remove duplicated csrftoken cookies (#6212 ) Due to a Safari bug, in some browser, two csrftoken cookies with different values exist: one unpartitioned, one partitioned ("CHIPS"). This function generates an additional Set-Cookie header to get rid of the unpartitioned one. As Django usually only allows one Set-Cookie header per cookie name, we need to manually create a cookie 'Morsel' for the deletion and store it in the HttpResponse's cookie dictionary under a different name, so it is not overwritten by the actual, correct Set-Cookie header. This works because the code in django.core.handlers.wsgi/asgi, that generates the actual Set-Cookie headers, only iterates over cookie.values(), ignoring the keys.	2026-05-22 17:22:56 +02:00

Author

SHA1

Message

Date

luelista

7237ece1ca

Remove duplicated csrftoken cookies (#6212 )

Due to a Safari bug, in some browser, two csrftoken cookies with different values
exist: one unpartitioned, one partitioned ("CHIPS"). This function generates an
additional Set-Cookie header to get rid of the unpartitioned one.

As Django usually only allows one Set-Cookie header per cookie name, we
need to manually create a cookie 'Morsel' for the deletion and store it
in the HttpResponse's cookie dictionary under a different name, so it is
not overwritten by the actual, correct Set-Cookie header. This works
because the code in django.core.handlers.wsgi/asgi, that generates the
actual Set-Cookie headers, only iterates over cookie.values(), ignoring
the keys.

2026-05-22 17:22:56 +02:00

Compare commits

1 Commits

remove-dup ... master

Diff Content Not Available

Compare commits

1 Commits remove-dup ... master

Diff Content Not Available

1 Commits

remove-dup ... master