Auth: strict same site header (#13896)

evcc-io · May 14, 2024 · e7db6df · e7db6df
1 parent d4e80f8
commit e7db6df
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/server/http_auth.go b/server/http_auth.go
@@ -114,6 +114,7 @@ func loginHandler(auth auth.Auth) http.HandlerFunc {
 			Path:     "/",
 			HttpOnly: true,
 			Expires:  time.Now().Add(lifetime),
+			SameSite: http.SameSiteStrictMode,
 		})
 	}
 }