transmit cookie only over HTTPS, fixes #472

2021-04-16 20:15:12 +02:00
parent 9e6eb50ced
commit 1dc8b24665
5 changed files with 6 additions and 5 deletions
--- a/js/privatebin.js
+++ b/js/privatebin.js
@@ -3676,7 +3676,7 @@ jQuery.PrivateBin = (function($, RawDeflate) {
         */
        function setLanguage(event)
        {
-            document.cookie = 'lang=' + $(event.target).data('lang');
+            document.cookie = 'lang=' + $(event.target).data('lang') + ';secure';
            UiHelper.reloadHome();
        }