Add SameSite attribute to cookie function?

Hi Stephen, Discourse sets all cookies to SameSite=lax. So you don’t need to do anything :tada:

The issue in the original post by @nolo was fixed back in April by this commit.

It is technically possible to vary the SameSite value of server-set cookies by changing the hidden same_site_cookies setting via the console. But we strongly advise against it - picking other values will either cause functional issues or security issues.

3 Likes