romm/backend/tests/handler at be476cb7dc3486a19225250c66ef09f041d60bb0 - romm

Simon/romm

mirror of https://github.com/rommapp/romm.git synced 2026-06-28 23:06:11 +00:00

Files

Georges-Antoine Assi be476cb7dc Only set CSRF cookie on http.response.start

ASGI spec only allows headers on the http.response.start message;
appending Set-Cookie to body messages is out-of-spec and may break on
some servers. Early-return for non-start messages.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-24 15:46:50 -04:00