Skip to content

Add secure and samesite flags to badge cookie

It looks like there have been several browser security improvements to prevent CSRF attacks. Chrome and Firefox now require cross-site cookies to have the secure and samesite attributes set.

I'm hoping this solves the issue we're seeing on both Chrome and Firefox.

Closes #28 (closed)

Merge request reports

Loading