From 4fafa8ae5a7bcd700f368bbe6016e0b0fb2cc892 Mon Sep 17 00:00:00 2001 From: jvoisin Date: Wed, 27 Dec 2017 15:43:33 +0100 Subject: Implement simulation mode for cookies (de/en)cryption This should close #102 This commit can be useful for two use-cases: 1. When deploying Snuffleupagus on big CMS like Magento, and not knowing what cookies are modified via javascript. 2. When deploying Snuffleupagus on big websites: you don't want to disconnect every single user at once. When simulation is enabled, if the decryption fails, a log message is now issued, and the cookie value taken as it (since odds are that it's non-encrypted). --- src/sp_config.h | 1 + 1 file changed, 1 insertion(+) (limited to 'src/sp_config.h') diff --git a/src/sp_config.h b/src/sp_config.h index 86513f9..3a7a79c 100644 --- a/src/sp_config.h +++ b/src/sp_config.h @@ -58,6 +58,7 @@ typedef struct { bool enable; } sp_config_disable_xxe; typedef struct { enum samesite_type {strict=1, lax=2} samesite; bool encrypt; + bool simulation; } sp_cookie; typedef struct { -- cgit v1.3