[checkmk-commits] [tribe29/checkmk] a14bec: 14478 SEC Restrict path param in cookies

Branch: refs/heads/2.0.0 Home: https://github.com/tribe29/checkmk Commit: a14becc3a9a0f1c750a254293b5231c6e39e18b3 https://github.com/tribe29/checkmk/commit/a14becc3a9a0f1c750a254293b5231c6e… Author: Maximilian Wirtz <maximilian.wirtz(a)tribe29.com> Date: 2022-06-27 (Mon, 27 Jun 2022) Changed paths: A .werks/14478 M cmk/gui/http.py M cmk/gui/login.py M tests/unit/cmk/gui/test_http.py Log Message: ----------- 14478 SEC Restrict path param in cookies The Path parameter of the cookies used to be set to '/'. Now it is restricted to the site URL prefix '/[SITE_ID]'. This commit squashed a7562bfb83877e8b1a92fb0efa7ed469038279a9 as well Change-Id: I2d1aef3f263b23562d9e043e3e59d87bafb949b1