From 8c54e9180d1d2c8e2210cff925d4552e8ca427db Mon Sep 17 00:00:00 2001 From: Unai Arrien Date: Wed, 11 Dec 2024 11:18:36 +0100 Subject: [PATCH] [PLT-1263] Add a cookie-csrf-per-request-limit attribute --- pkg/cookies/csrf.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pkg/cookies/csrf.go b/pkg/cookies/csrf.go index 0c8e1cc780..1e3f913e80 100644 --- a/pkg/cookies/csrf.go +++ b/pkg/cookies/csrf.go @@ -176,7 +176,7 @@ func ClearExtraCsrfCookies(opts *options.Cookie, rw http.ResponseWriter, req *ht } sort.Slice(decodedCookies, func(i, j int) bool { - return decodedCookies[i].time.Now().Before(decodedCookies[j].time.Now()) + return decodedCookies[i].time.Before(decodedCookies[j].time) }) numberToDelete := len(decodedCookies) - opts.CSRFPerRequestLimit