summaryrefslogtreecommitdiff
path: root/nginx/snippets
diff options
context:
space:
mode:
authorDaniel Micay <danielmicay@gmail.com>2021-03-23 10:46:50 -0400
committerDaniel Micay <danielmicay@gmail.com>2021-03-23 10:46:50 -0400
commita0d93f3375f4238049b0b553fb21070841c87acd (patch)
tree35c19d1c03eed2ee153127c8fe32cb380c912adc /nginx/snippets
parent35f926e00e8d6466803e6c869e7a555bec7a9e4c (diff)
explicitly set SameSite for preload session cookie
Diffstat (limited to 'nginx/snippets')
-rw-r--r--nginx/snippets/preload.conf2
1 files changed, 1 insertions, 1 deletions
diff --git a/nginx/snippets/preload.conf b/nginx/snippets/preload.conf
index 12406fca..c3f2d886 100644
--- a/nginx/snippets/preload.conf
+++ b/nginx/snippets/preload.conf
@@ -1,3 +1,3 @@
add_header Link $preload_resources always;
-add_header Set-Cookie "__Host-preload=1; HttpOnly; Secure; Path=/" always;
+add_header Set-Cookie "__Host-preload=1; HttpOnly; Secure; SameSite=Lax; Path=/" always;
http2_push_preload on;