diff options
author | Eugen Rochko <eugen@zeonfederated.com> | 2020-11-06 11:57:14 +0100 |
---|---|---|
committer | GitHub <noreply@github.com> | 2020-11-06 11:57:14 +0100 |
commit | acc1c038610a82d8470acde6753716da0dc4b1fa (patch) | |
tree | 18aa4e0c94907f653e07ca8c1e373a8882cced9c /config/initializers/session_store.rb | |
parent | 9b1f2a4b61660f9a8be62f6296d97a856e376059 (diff) |
Fix cookies not having a SameSite attribute (#15098)
Diffstat (limited to 'config/initializers/session_store.rb')
-rw-r--r-- | config/initializers/session_store.rb | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/config/initializers/session_store.rb b/config/initializers/session_store.rb index 3dc0edd6f..e5d1be4c6 100644 --- a/config/initializers/session_store.rb +++ b/config/initializers/session_store.rb @@ -1,3 +1,7 @@ # Be sure to restart your server when you modify this file. -Rails.application.config.session_store :cookie_store, key: '_mastodon_session', secure: (Rails.env.production? || ENV['LOCAL_HTTPS'] == 'true') +Rails.application.config.session_store :cookie_store, { + key: '_mastodon_session', + secure: (Rails.env.production? || ENV['LOCAL_HTTPS'] == 'true'), + same_site: :lax, +} |