7 Commits

Author	SHA1	Message	Date
Jacob Vosmaer	8d78662e69	Give the Rails cache its own Redis namespace ... Before this change, Rails cache data was stored in a global Redis namespace. As a consequence, clearing the Rails cache (`rake cache:clear`) would also delete all Sidekiq queue data and session storage. This change puts all Rails cache data in a `cache:gitlab` namespace, making `rake cache:clear` safe again.	2014-04-15 15:53:14 +02:00
Marin Jankovski	c447a2131d	Enable secure option if https is used.	2013-12-25 12:30:33 +01:00
vollnhals	67c18aa941	Respect the configured redis URL when initializing the session store ... It was not possible to start Gitlab with a redis server running on another host or port. Every other subsystem that uses redis respects the settings in config/resque.yml. This patch uses the configured url from the cache_store configuration. The cache_store configuration already loads the correct redis url from config/resque.yml. Closes #5406	2013-10-30 17:11:56 +01:00
Sytse Sijbrandij	ba7c1764be	The cookie store is vulnerable to session replay attacks.	2013-10-11 17:54:46 +02:00
amouhzi	39d8a64d25	Fixes grack authentification under relative_url_root ... Ref: e6159b8725 Ref: https://github.com/gitlabhq/gitlabhq/pull/3204 Ref: https://github.com/gitlabhq/gitlabhq/issues/1228 Add Rails' variable in application.rb to support relative url This variable is used by assets compilation and other modules. Note that user needs to change application.rb too Restrict session cookie to the relative path if set. Ref: 2c2f1e3185 Fix Update attachment_uploader.rb bug with relative URL See: 161afda3fa Fix Wall relative bug with attachement files (javascript)	2013-08-15 21:25:09 +02:00
Marin Jankovski	a58d311262	Secure and httponly options on cookie.	2012-09-26 16:02:31 +02:00
gitlabhq	9ba1224867	init commit	2011-10-09 00:36:38 +03:00