mastodon/config/initializers/makara.rb

Makara::Cookie::DEFAULT_OPTIONS[:same_site] = :lax
Makara::Cookie::DEFAULT_OPTIONS[:secure]    = Rails.env.production? || ENV['LOCAL_HTTPS'] == 'true'
Fix cookies not having a SameSite attribute (#15098) 2020-11-06 11:57:14 +01:00			`Makara::Cookie::DEFAULT_OPTIONS[:same_site] = :lax`
Drop dependency on secure_headers, fix response headers (#15712) * Drop dependency on secure_headers, use always_write_cookie instead * Fix cookies in Tor Hidden Services by moving configuration to application.rb * Instead of setting always_write_cookie at boot, monkey-patch ActionDispatch 2021-02-11 23:47:05 +01:00			`Makara::Cookie::DEFAULT_OPTIONS[:secure] = Rails.env.production? \|\| ENV['LOCAL_HTTPS'] == 'true'`