Updated default same site behaviour to not write SameSite attribute t…

…o cookie at all. See golang/go#36990
vouch · Mar 16, 2020 · 802f4ea · 802f4ea
1 parent 7124218
commit 802f4ea
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pkg/cookie/cookie.go b/pkg/cookie/cookie.go
@@ -32,7 +32,7 @@ func setCookie(w http.ResponseWriter, r *http.Request, val string, maxAge int) {
 		log.Debugf("setting the cookie domain to %v", domain)
 	}
 
-	sameSite := http.SameSiteDefaultMode
+	sameSite := http.SameSite(0)
 	if cfg.Cfg.Cookie.SameSite != "" {
 		switch strings.ToLower(cfg.Cfg.Cookie.SameSite) {
 		case "lax":