mirror of
https://github.com/iv-org/invidious.git
synced 2024-11-10 02:08:23 +00:00
Add sameSite policy in cookie management in server side
This commit is contained in:
parent
8e4959a621
commit
09a585c93b
@ -17,7 +17,8 @@ struct Invidious::User
|
||||
value: sid,
|
||||
expires: Time.utc + 2.years,
|
||||
secure: SECURE,
|
||||
http_only: true
|
||||
http_only: true,
|
||||
samesite: HTTP::Cookie::SameSite::Strict
|
||||
)
|
||||
end
|
||||
|
||||
@ -30,7 +31,8 @@ struct Invidious::User
|
||||
value: URI.encode_www_form(preferences.to_json),
|
||||
expires: Time.utc + 2.years,
|
||||
secure: SECURE,
|
||||
http_only: false
|
||||
http_only: false,
|
||||
samesite: HTTP::Cookie::SameSite::Strict
|
||||
)
|
||||
end
|
||||
end
|
||||
|
Loading…
Reference in New Issue
Block a user