Skip to content

v0.7.2

Compare
Choose a tag to compare
@embluk embluk released this 04 May 23:40
· 29 commits to master since this release

Changed

  • Changed the CSRF cookie token to use Lax for the SameSite attribute instead of Strict

  • Changed the session cookie to use Lax for the SameSite attribute instead of Strict. Before when the session
    cookie used Strict, if links were clicked externally for an app, the cookie gets blocked and thus, an invalid
    session is created and the user is then logged out