Set SameSite flag to 'Strict'

This commit is contained in:
shibayashi 2018-08-28 14:03:29 +02:00
parent 0c4493f144
commit 4656a07e9e
No known key found for this signature in database
GPG key ID: C10662A33EB28508

View file

@ -52,7 +52,7 @@ defmodule Pleroma.Web.Endpoint do
signing_salt: "CqaoopA2",
secure:
Application.get_env(:pleroma, Pleroma.Web.Endpoint) |> Keyword.get(:secure_cookie_flag),
extra: "SameSite=Lax"
extra: "SameSite=Strict"
)
plug(Pleroma.Web.Router)