HIDE_REFERER incompatible with password based login, added comment to code #996
This commit is contained in:
@@ -102,8 +102,8 @@ def main():
|
|||||||
has_password=datastore.data['settings']['application']['password'] != False
|
has_password=datastore.data['settings']['application']['password'] != False
|
||||||
)
|
)
|
||||||
|
|
||||||
# Monitored websites will not receive a Referer header
|
# Monitored websites will not receive a Referer header when a user clicks on an outgoing link.
|
||||||
# when a user clicks on an outgoing link.
|
# @Note: Incompatible with password login (and maybe other features) for now, submit a PR!
|
||||||
@app.after_request
|
@app.after_request
|
||||||
def hide_referrer(response):
|
def hide_referrer(response):
|
||||||
if os.getenv("HIDE_REFERER", False):
|
if os.getenv("HIDE_REFERER", False):
|
||||||
|
|||||||
Reference in New Issue
Block a user