feat: Set SESSION_COOKIE_SAMESITE to 'Lax' for improved security

2025-02-16 15:35:10 -05:00
parent 670e499d8f
commit 2713b3640f
1 changed files with 1 additions and 1 deletions
--- a/backend/server/main/settings.py
+++ b/backend/server/main/settings.py
@@ -131,7 +131,7 @@ USE_TZ = True
 unParsedFrontenedUrl = getenv('FRONTEND_URL', 'http://localhost:3000')
 FRONTEND_URL = unParsedFrontenedUrl.translate(str.maketrans('', '', '\'"'))

-SESSION_COOKIE_SAMESITE = None
+SESSION_COOKIE_SAMESITE = 'Lax'

 SESSION_COOKIE_SECURE = FRONTEND_URL.startswith('https')