Set same-site cookie policy - Githubissues

PlaidWeb / Publ

Flexible publishing system for the web

http://publ.beesbuzz.biz/

MIT License

40 stars 4 forks source link

Set same-site cookie policy #527

Closed fluffy-critter closed 1 year ago

fluffy-critter commented 1 year ago

Summary

Fixes #524

Detailed description

Sets the same-site cookie policy to Lax and also disables access to the session cookie via JavaScript, providing better clickjack mitigation.

Developer/user impact

Test plan

Got a site to show off?