GOMODULES/fiber
1
0
Fork 0
mirror of https://github.com/gofiber/fiber.git synced 2025-07-10 12:38:14 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(middleware/session): CookieSameSite default "Lax" (#1638)

Browse Source 
* CookieSameSite default "Lax"

* Update README.md

* CookieSameSite default "Lax"

* Revert "CookieSameSite default "Lax""

This reverts commit 414187704b6173481f992ad96bb1a6df1094bd4d.
This commit is contained in:
Jason McNeil 2021-12-02 02:44:03 -04:00 committed by GitHub
parent af6b204e50
commit 693f3c5118
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 2 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
middleware/session/README.md
View File

@ -140,8 +140,8 @@ type Config struct {
// Optional. Default value false.
CookieHTTPOnly bool
// Indicates if CSRF cookie is HTTP only.
// Optional. Default value false.
// Sets the CSRF cookie SameSite attribute.
// Optional. Default value "Lax".
CookieSameSite string
// KeyGenerator generates the session key.

1
middleware/session/session.go
View File

@ -202,7 +202,6 @@ func (s *Session) setSession() {
fcookie.SetSecure(s.config.CookieSecure)
fcookie.SetHTTPOnly(s.config.CookieHTTPOnly)
// TODO Default value should be set to `strict` in fiber v3.
switch utils.ToLower(s.config.CookieSameSite) {
case "strict":
fcookie.SetSameSite(fasthttp.CookieSameSiteStrictMode)