From 9a5514942eb84967b1ffa3f8ef71e38101507c93 Mon Sep 17 00:00:00 2001
From: Sebastian Serth <Sebastian.Serth@hpi.de>
Date: Thu, 22 Apr 2021 11:31:30 +0200
Subject: [PATCH] Remove CSRF debug features

---
 app/assets/javascripts/editor/ajax.js   | 5 -----
 app/views/layouts/application.html.slim | 4 ----
 config/initializers/session_store.rb    | 2 +-
 3 files changed, 1 insertion(+), 10 deletions(-)

diff --git a/app/assets/javascripts/editor/ajax.js b/app/assets/javascripts/editor/ajax.js
index a3bbf383..731b3b12 100644
--- a/app/assets/javascripts/editor/ajax.js
+++ b/app/assets/javascripts/editor/ajax.js
@@ -12,11 +12,6 @@ CodeOceanEditorAJAX = {
     $.flash.danger({
       text: message.length > 0 ? message : $('#flash').data('message-failure')
     });
-    Sentry.setContext("error",{
-        cookie: document.cookie,
-        response: response.responseText,
-        csrf: $('meta[name="csrf-token"]').attr("content")
-    });
     Sentry.captureException(JSON.stringify(response));
   }
 };
\ No newline at end of file
diff --git a/app/views/layouts/application.html.slim b/app/views/layouts/application.html.slim
index 6d361f27..6328bf8f 100644
--- a/app/views/layouts/application.html.slim
+++ b/app/views/layouts/application.html.slim
@@ -27,10 +27,6 @@ html lang="#{I18n.locale || I18n.default_locale}"
         |      release: "#{Sentry.configuration.release}",
         |      environment: "#{Sentry.configuration.environment}",
         |  });
-        | Sentry.setContext("initial",{
-        |      cookie: document.cookie,
-        |      csrf: $('meta[name="csrf-token"]').attr("content")
-        |  });
         - if @current_user
           | Sentry.configureScope(function(scope) {
           |   scope.setUser({
diff --git a/config/initializers/session_store.rb b/config/initializers/session_store.rb
index 54561c5e..bdaed01f 100644
--- a/config/initializers/session_store.rb
+++ b/config/initializers/session_store.rb
@@ -1,3 +1,3 @@
 # Be sure to restart your server when you modify this file.
 
-Rails.application.config.session_store :cookie_store, key: '_code_ocean_session', httponly: false
+Rails.application.config.session_store :cookie_store, key: '_code_ocean_session'