Set sameSite cookie to strict

digitalservicebund · Apr 11, 2024 · 7f52037 · 7f52037
1 parent 56a9956
commit 7f52037
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/sessions.server.ts b/app/sessions.server.ts
@@ -37,7 +37,7 @@ if (sessionCookieSecret === undefined) {
 const sessionCookie = createCookie("__session", {
   maxAge: 30 * 24 * 60 * 60,
   secrets: [sessionCookieSecret],
-  sameSite: "lax",
+  sameSite: "strict",
   secure: true,
   httpOnly: true,
 });