huahaofeng
/
aspnetcore
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Mark cookie as non-essential. Home#2393

This commit is contained in:
Chris Ross (ASP.NET) 2018-01-29 12:50:17 -08:00
parent 6d15dcf1ca
commit 6e122c45b4
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
src/Microsoft.AspNetCore.Session/SessionOptions.cs
View File

@ -22,6 +22,7 @@ namespace Microsoft.AspNetCore.Builder
/// <see cref="CookieBuilder.Path"/> defaults to <see cref="SessionDefaults.CookiePath"/>.
/// <see cref="CookieBuilder.SameSite"/> defaults to <see cref="SameSiteMode.Lax"/>.
/// <see cref="CookieBuilder.HttpOnly"/> defaults to <c>true</c>
/// <see cref="CookieBuilder.IsEssential"/> defaults to <c>false</c>
/// </para>
/// </summary>
public CookieBuilder Cookie
@ -111,6 +112,8 @@ namespace Microsoft.AspNetCore.Builder
SecurePolicy = CookieSecurePolicy.None;
SameSite = SameSiteMode.Lax;
HttpOnly = true;
// Session is considered non-essential as it's designed for ephemeral data.
IsEssential = false;
}
public override TimeSpan? Expiration