From 035312d50110c54d1f4d0636d91333d2a9698b0c Mon Sep 17 00:00:00 2001 From: Sam Date: Tue, 24 Apr 2018 13:24:26 +1000 Subject: [PATCH] FIX: specify path for dosp cookie --- lib/middleware/anonymous_cache.rb | 2 +- spec/components/middleware/anonymous_cache_spec.rb | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/lib/middleware/anonymous_cache.rb b/lib/middleware/anonymous_cache.rb index 17e3309d021..2a195c2f930 100644 --- a/lib/middleware/anonymous_cache.rb +++ b/lib/middleware/anonymous_cache.rb @@ -201,7 +201,7 @@ module Middleware end if force_anon - result[1]["Set-Cookie"] = "dosp=1" + result[1]["Set-Cookie"] = "dosp=1; Path=/" end result diff --git a/spec/components/middleware/anonymous_cache_spec.rb b/spec/components/middleware/anonymous_cache_spec.rb index 65ef9f63f65..ed4ad96c34e 100644 --- a/spec/components/middleware/anonymous_cache_spec.rb +++ b/spec/components/middleware/anonymous_cache_spec.rb @@ -94,7 +94,7 @@ describe Middleware::AnonymousCache::Helper do is_anon = false _status, headers, _body = app.call(env.dup) expect(is_anon).to eq(true) - expect(headers['Set-Cookie']).to eq('dosp=1') + expect(headers['Set-Cookie']).to eq('dosp=1; Path=/') # tricky change, a 50ms delay still will trigger protection # once it is tripped