search

fukamachi / lack

Lack, the core of Clack
MIT License
148 stars 33 forks source link

Fix browsers rejecting unsecure not-samesite cookies #56

Closed zen-wq closed 3 years ago

zen-wq commented 3 years ago

There were two options to fix this. Either add Secure or remove samesite=None. I think it makes no sense to send our session-id to other sites so I used the latter.

Not sure if the warning is needed but it may go unnoticed in the browser.

fukamachi commented 3 years ago

Thanks!