diff --git a/app/config.py b/app/config.py index 30917f0f57..a79fd64f37 100644 --- a/app/config.py +++ b/app/config.py @@ -116,6 +116,7 @@ class Config(object): SESSION_COOKIE_NAME = "notify_admin_session" SESSION_COOKIE_SECURE = True SESSION_REFRESH_EACH_REQUEST = True + SESSION_COOKIE_SAMESITE = "Lax" SENSITIVE_SERVICES = os.environ.get("SENSITIVE_SERVICES", "") SHOW_STYLEGUIDE = env.bool("SHOW_STYLEGUIDE", True)