Просмотр исходного кода

Merge pull request #2537 from overleaf/spd-cookie-samesite-setting

Re-add missing sameSiteCookie setting

GitOrigin-RevId: be46affcc95b7e4c79f86503da933c6fcc277d4f
Simon Detheridge 6 лет назад
Родитель
Сommit
37d833db62
1 измененных файлов с 2 добавлено и 1 удалено
  1. 2 1
      services/web/app/src/infrastructure/Server.js

+ 2 - 1
services/web/app/src/infrastructure/Server.js

@@ -106,7 +106,8 @@ webRouter.use(
     cookie: {
       domain: Settings.cookieDomain,
       maxAge: Settings.cookieSessionLength, // in milliseconds, see https://github.com/expressjs/session#cookiemaxage
-      secure: Settings.secureCookie
+      secure: Settings.secureCookie,
+      sameSite: Settings.sameSiteCookie
     },
     store: sessionStore,
     key: Settings.cookieName,