Merge pull request #2537 from overleaf/spd-cookie-samesite-setting

Re-add missing sameSiteCookie setting GitOrigin-RevId: be46affcc95b7e4c79f86503da933c6fcc277d4f
2020-01-22 04:23:17 +00:00
parent 2f1d6c0338
commit 37d833db62
1 changed files with 2 additions and 1 deletions
@@ -106,7 +106,8 @@ webRouter.use(
    cookie: {
      domain: Settings.cookieDomain,
      maxAge: Settings.cookieSessionLength, // in milliseconds, see https://github.com/expressjs/session#cookiemaxage
-      secure: Settings.secureCookie
+      secure: Settings.secureCookie,
+      sameSite: Settings.sameSiteCookie
    },
    store: sessionStore,
    key: Settings.cookieName,