Change SameSite to Lax in app.lua

snap-cloud · Apr 27, 2021 · 79950a8 · 79950a8
1 parent 2fb0b83
commit 79950a8
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app.lua b/app.lua
@@ -74,7 +74,7 @@ require 'responses'
 app.cookie_attributes = function(self)
     local expires = date(true):adddays(365):fmt("${http}")
     local secure = config._name ~= 'development' and " Secure" or ""
-    return "Expires=" .. expires .. "; Path=/; HttpOnly; SameSite=None;" .. secure
+    return "Expires=" .. expires .. "; Path=/; HttpOnly; SameSite=Lax;" .. secure
 end
 
 -- Remove the protocol and port from a URL