v0.7.2
Changed
-
Changed the CSRF cookie token to use
Lax
for the SameSite attribute instead ofStrict
-
Changed the session cookie to use Lax for the SameSite attribute instead of Strict. Before when the session
cookie used Strict, if links were clicked externally for an app, the cookie gets blocked and thus, an invalid
session is created and the user is then logged out