mastodon/config/initializers/session_store.rb

# Be sure to restart your server when you modify this file.

Rails.application.config.session_store :cookie_store, {
  key: '_mastodon_session',
  secure: (Rails.env.production? || ENV['LOCAL_HTTPS'] == 'true'),
  same_site: :lax,
}
Initial commit 2016-02-20 22:53:20 +01:00			`# Be sure to restart your server when you modify this file.`

Fix cookies not having a SameSite attribute (#15098) 2020-11-06 11:57:14 +01:00			`Rails.application.config.session_store :cookie_store, {`
			`key: '_mastodon_session',`
Drop dependency on secure_headers, fix response headers (#15712) * Drop dependency on secure_headers, use always_write_cookie instead * Fix cookies in Tor Hidden Services by moving configuration to application.rb * Instead of setting always_write_cookie at boot, monkey-patch ActionDispatch 2021-02-11 23:47:05 +01:00			`secure: (Rails.env.production? \|\| ENV['LOCAL_HTTPS'] == 'true'),`
Fix cookies not having a SameSite attribute (#15098) 2020-11-06 11:57:14 +01:00			`same_site: :lax,`
			`}`