set cookie samesite (#1708)

cds-snc · Nov 8, 2023 · 3a87e19 · 3a87e19
1 parent 25adbba
commit 3a87e19
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/app/config.py b/app/config.py
@@ -116,6 +116,7 @@ class Config(object):
     SESSION_COOKIE_NAME = "notify_admin_session"
     SESSION_COOKIE_SECURE = True
     SESSION_REFRESH_EACH_REQUEST = True
+    SESSION_COOKIE_SAMESITE = "Lax"
     SENSITIVE_SERVICES = os.environ.get("SENSITIVE_SERVICES", "")
     SHOW_STYLEGUIDE = env.bool("SHOW_STYLEGUIDE", True)