Enable cookies_same_site_protection :lax (#17875)

This commit is contained in:
Mac Siri 2022-06-09 16:04:39 -04:00 committed by GitHub
parent ff6ed8afa0
commit 686be06009
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -20,7 +20,7 @@ Rails.application.config.active_job.skip_after_callbacks_if_terminated = true
#
# This change is not backwards compatible with earlier Rails versions.
# It's best enabled when your entire app is migrated and stable on 6.1.
# Rails.application.config.action_dispatch.cookies_same_site_protection = :lax
Rails.application.config.action_dispatch.cookies_same_site_protection = :lax
# Generate CSRF tokens that are encoded in URL-safe Base64.
#