Merge pull request #5390 from KenTanaka/issue/5370

メンテナンストークンにSecure属性を設定する
EC-CUBE · Jun 28, 2022 · 6381f7b · 6381f7b
2 parents 406d7f3 + 42235e0
commit 6381f7b
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/Eccube/EventListener/MaintenanceListener.php b/src/Eccube/EventListener/MaintenanceListener.php
@@ -54,10 +54,10 @@ public function onResponse(ResponseEvent $event)
 
         $user = $this->requestContext->getCurrentUser();
         if ($user instanceof Entity\Member && $this->requestContext->isAdmin()) {
-            $cookie = new Cookie(
+            $cookie = (new Cookie(
                 SystemService::MAINTENANCE_TOKEN_KEY,
                 $this->systemService->getMaintenanceToken()
-            );
+            ))->withSecure(true);
             $response->headers->setCookie($cookie);
         }
     }