Assign sensible default value to session cookie 'SameSite' field #25

roblillack · Dec 13, 2022 · ee5001b · ee5001b
1 parent c4c1b47
commit ee5001b
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/session.go b/session.go
@@ -88,6 +88,7 @@ func (s Session) Cookie() *http.Cookie {
 		Domain:   CookieDomain,
 		Path:     "/",
 		HttpOnly: CookieHttpOnly,
+		SameSite: http.SameSiteStrictMode,
 		Secure:   CookieSecure,
 		Expires:  ts.UTC(),
 	}