(web) Fix XSRF cookie path when changing password

Fixes #4139
2026-10-05 20:10:33 +00:00 · 2017-09-19 09:44:37 -04:00
parent 391410a4ec
commit 789398bd27
2 changed files with 2 additions and 0 deletions
@@ -623,6 +623,7 @@
      creds = [auth parseCredentials: [authCookie value]];
      xsrfCookie = [WOCookie cookieWithName: @"XSRF-TOKEN"
                                      value: [[SOGoSession valueForSessionKey: [creds lastObject]] asSHA1String]];
+      [xsrfCookie setPath: [NSString stringWithFormat: @"/%@/", [request applicationName]]];
      [response addCookie: xsrfCookie];
    }
  else