gitmodir110/vernova
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
785e168f5e
vernova/laravel
History
Robert K 785e168f5e Check application.ssl when setting a secure cookie 
Most SLL-related code in Laravel checks to see if `application.ssl`
is true before doing an action requiring it. `Cookie::put()` is the
only exception that I've found, to date, that doesn't test for SSL.

This checks to see that the SSL is enabled when attempting to set a
secure cookie.

To verify, set `application.ssl` to false (without this patch) then
run:

	Cookie::put('foo', 'bar', 0, '/', null, true);

You will get an exception because of line 90 in `cookie.php`:

		if ($secure and ! Request::secure())
		{
			throw new \Exception("Attempting to set secure cookie over HTTP.");
		}

With this patch you will not get this error unless both `application.ssl`
is true, and the cookie `$secure` flag is set.
2013-04-03 12:13:21 -03:00
..
auth/drivers Allow the renaming of the drivers remember cookie 2013-03-16 21:40:33 -05:00
cache/drivers Ability to flush file-based cache storage 2013-03-29 11:02:26 +11:00
cli Exit with non-zero if command fails, useful in scripting and CI 2013-03-29 12:27:09 +11:00
database Merge pull request #1663 from neoascetic/anbu_fix 2013-03-28 14:53:50 -07:00
documentation Add unregister to IoC-Contrainer 2013-04-02 11:09:40 +02:00
profiling Merge pull request #1663 from neoascetic/anbu_fix 2013-03-28 14:53:50 -07:00
routing Merge pull request #1618 from demsey2/master 2013-03-28 15:12:02 -07:00
session Update laravel/session/drivers/cookie.php 2013-02-06 13:35:03 +08:00
tests Add unregister to IoC-Contrainer 2013-04-02 11:09:40 +02:00
vendor/Symfony/Component Updated Symfony HttpFoundation to 2.1.6. 2013-01-06 13:58:36 -06:00
asset.php Fixed wrong return type in phpdoc 2012-09-28 10:10:35 +02:00
auth.php
autoloader.php
blade.php Automatically apply entitiesto output using blade 2012-12-17 02:38:06 +11:00
bundle.php Merge pull request #1014 from jasonlewis/feature/root-bundles 2012-09-01 17:26:35 -07:00
cache.php added wincache cache driver 2012-12-26 13:47:36 +10:00
config.php
cookie.php Check application.ssl when setting a secure cookie 2013-04-03 12:13:21 -03:00
core.php Merge branch 'master' into develop 2013-01-06 14:01:18 -06:00
crypter.php fix padding bug in crypter. 2013-03-28 15:50:25 -05:00
database.php Implement DB::escape(). 2012-10-05 14:38:13 +03:00
error.php Updated error class to pass the Exception for the 500 triggered event. 2013-02-15 09:50:32 +11:00
event.php
file.php Update laravel/file.php 2012-10-22 10:09:53 +12:00
fluent.php
form.php HTML::entities() now optional on label contents 2013-02-03 19:15:55 +01:00
hash.php
helpers.php Update laravel/helpers.php 2012-11-05 09:28:48 +01:00
html.php Merge pull request #1390 from Anahkiasen/feature/url_language 2013-01-05 12:46:43 -08:00
input.php fix array input has. 2013-03-28 15:35:09 -05:00
ioc.php Add unregister to IoC-Contrainer 2013-04-02 11:09:40 +02:00
lang.php
laravel.php Allowing use of third party Routers to handle Routing. 2012-11-01 08:20:30 +11:00
log.php Fixed bug where laravel is generating error log from outside of application classes. 2013-01-23 20:56:48 -08:00
memcached.php
messages.php
paginator.php Fixed 2 stupid bugs for better markup 2012-09-11 07:48:01 +05:30
pluralizer.php Don't cast in pluralizer. 2013-01-05 14:55:04 -06:00
redirect.php Merge pull request #681 from bencorlett/develop 2012-08-13 12:17:35 -07:00
redis.php Handles Redis password 2013-02-07 03:35:42 +01:00
request.php Update laravel/request.php 2013-02-27 08:54:57 +08:00
response.php Merge branch 'master' into develop 2013-01-05 14:36:48 -06:00
section.php
session.php
str.php Allow forward slash separators in Str::classify() 2012-12-06 11:32:18 +11:00
uri.php
url.php Fix bug. 2013-01-05 16:15:18 -06:00
validator.php Fixing merge issues. 2013-01-06 20:14:07 +00:00
view.php Work on section handling. 2012-11-06 15:04:13 -06:00