Make sure that HTTPS indicator is defined

ylavoie · Sep 29, 2021 · 7491637 · 7491637
1 parent 1f5b8d8
commit 7491637
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/LedgerSMB/Middleware/SessionStorage.pm b/lib/LedgerSMB/Middleware/SessionStorage.pm
@@ -107,7 +107,7 @@ sub call {
     my $cookie      = $req->cookies->{$self->cookie};
     my $session     = $store->decode($cookie);
 
-    my $secure = $env->{HTTPS} eq 'ON';
+    my $secure = defined($env->{HTTPS}) && $env->{HTTPS} eq 'ON';
     my $path =
         $self->cookie_path //
         LedgerSMB::PSGI::Util::cookie_path($env->{SCRIPT_NAME});