Merge pull request #355 from sholladay/master

Set SameSite=Strict for improved security
hapijs · Apr 3, 2018 · 15059f9 · 15059f9
2 parents 73dfcb2 + c9a6416
commit 15059f9
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/index.js b/lib/index.js
@@ -114,7 +114,7 @@ internals.implementation = function (server, options) {
         password: settings.password,
         isSecure: settings.isSecure !== false,                  // Defaults to true
         isHttpOnly: settings.isHttpOnly !== false,              // Defaults to true
-        isSameSite: false,
+        isSameSite: 'Strict',
         ttl: settings.ttl,
         domain: settings.domain,
         ignoreErrors: true,