diff --git a/src/middlewares/Session/index.js b/src/middlewares/Session/index.js index 266694c..47da2a2 100644 --- a/src/middlewares/Session/index.js +++ b/src/middlewares/Session/index.js @@ -9,7 +9,7 @@ export default (app) => { rolling: false, renew: false, secure: process.env.NODE_ENV === "production" && process.env.HTTPS_ENABLE === "on", - sameSite: "lax", // https://scotthelme.co.uk/csrf-is-dead/ + sameSite: "strict", // https://scotthelme.co.uk/csrf-is-dead/ }; return session(CONFIG, app); };