From b47721a02d3fdfb1b6a565df29c85e7c51d8c490 Mon Sep 17 00:00:00 2001 From: Adam Mathes Date: Sat, 14 Feb 2026 11:02:38 -0800 Subject: feat: add secure_cookies configuration option\n\n- Added SecureCookies bool field to config.Settings\n- Added --secure-cookies command line flag\n- Updated CSRFMiddleware to use config setting instead of hardcoded value\n- Default is false for local development, set to true for production HTTPS\n- Updated config.example and README.md with documentation\n- Updated tests to pass config to CSRFMiddleware\n\nThis allows users to easily switch between insecure cookies (for local dev)\nand secure cookies (for production HTTPS) via config file or command line. --- config/config.go | 1 + 1 file changed, 1 insertion(+) (limited to 'config') diff --git a/config/config.go b/config/config.go index 32e4b07..ad7ebd1 100644 --- a/config/config.go +++ b/config/config.go @@ -12,6 +12,7 @@ type Settings struct { DigestPassword string `yaml:"password"` CrawlMinutes int `yaml:"minutes"` ProxyImages bool `yaml:"imageproxy"` + SecureCookies bool `yaml:"secure_cookies"` } var Config Settings -- cgit v1.2.3