From 686be0600933ff3f5309ba6122e4541ca101036a Mon Sep 17 00:00:00 2001 From: Mac Siri Date: Thu, 9 Jun 2022 16:04:39 -0400 Subject: [PATCH] Enable cookies_same_site_protection :lax (#17875) --- config/initializers/new_framework_defaults_6_1.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/initializers/new_framework_defaults_6_1.rb b/config/initializers/new_framework_defaults_6_1.rb index 48fd867bf..1dc9b4f08 100644 --- a/config/initializers/new_framework_defaults_6_1.rb +++ b/config/initializers/new_framework_defaults_6_1.rb @@ -20,7 +20,7 @@ Rails.application.config.active_job.skip_after_callbacks_if_terminated = true # # This change is not backwards compatible with earlier Rails versions. # It's best enabled when your entire app is migrated and stable on 6.1. -# Rails.application.config.action_dispatch.cookies_same_site_protection = :lax +Rails.application.config.action_dispatch.cookies_same_site_protection = :lax # Generate CSRF tokens that are encoded in URL-safe Base64. #