server/tailsql: update session cookie settings

tailscale · Aug 13, 2023 · f851c76 · f851c76
1 parent c9dd811
commit f851c76
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/README.md b/README.md
@@ -1,5 +1,7 @@
 # TailSQL
 
+http://tailsql-dev?q=meta:named
+
 TailSQL is a self-contained SQL playground service that runs on [Tailscale](https://tailscale.com).
 It permits users to query SQL databases from a basic web-based UI, with support for any database
 that can plug in to the Go [`database/sql`](https://godoc.org/database/sql) package.

diff --git a/server/tailsql/tailsql.go b/server/tailsql/tailsql.go
@@ -89,7 +89,7 @@ const noBrowsersHeader = "Sec-Tailsql"
 // siteAccessCookie is a cookie that must be presented with any request from a
 // browser that includes a query, and does not have the noBrowsersHeader.
 var siteAccessCookie = &http.Cookie{
-	Name: "tailsqlQuery", Value: "1", SameSite: http.SameSiteStrictMode, HttpOnly: true,
+	Name: "tailsqlQuery", Value: "1", SameSite: http.SameSiteLaxMode, HttpOnly: true,
 }
 
 func requestHasSiteAccess(r *http.Request) bool {