mirror of
https://github.com/BigBodyCobain/Shadowbroker.git
synced 2026-05-01 07:18:05 +02:00
ea457f27da
Skip the Secure flag on the session cookie when the request comes from a loopback address (localhost, 127.0.0.1, ::1). The Docker image sets NODE_ENV=production which always enabled Secure, but browsers silently drop Secure cookies on plain HTTP — breaking the admin panel for self-hosted users accessing http://localhost:3000. Fixes #129