security/hakurei.app
security/hakurei.app
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 4 Wiki Activity

explicitly set SameSite for preload session cookie

Browse Source
This commit is contained in:
Daniel Micay 2021-03-23 10:46:50 -04:00
parent 35f926e00e
commit a0d93f3375
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
nginx/snippets/preload.conf
View File

@ -1,3 +1,3 @@
add_header Link $preload_resources always;
add_header Set-Cookie "__Host-preload=1; HttpOnly; Secure; Path=/" always;
add_header Set-Cookie "__Host-preload=1; HttpOnly; Secure; SameSite=Lax; Path=/" always;
http2_push_preload on;