support hypercorn server_names against dns rebind attacks, add cookie sessions to flash messages

2022-04-06 18:59:07 +02:00
parent d1050d2ee4
commit 4ef792e97d
9 changed files with 71 additions and 30 deletions
@@ -1,7 +1,11 @@
 ---
-secret: mysecret
+comm-secret: mysecret
+cookie-secret: mysecret
 controllers:
 - capport-controller1.example.com
 - capport-controller2.example.com
 session-timeout: 3600  # in seconds
 venue-info-url: 'https://example.com'
+server-names:
+- localhost
+- ...