Set cookie SameSite: Lax.

1 files changed, 4 insertions, 1 deletions

diff --git a/server.js b/server.js
index c95ffd9..5e90135 100644
--- a/server.js
+++ b/server.js
@@ -70,7 +70,10 @@ app.use(express_session({
 	rolling: true,
 	saveUninitialized: false,
 	store: session_store,
-	cookie: { maxAge: 7 * 24 * 60 * 60 * 1000 }
+	cookie: {
+		maxAge: 7 * 24 * 60 * 60 * 1000,
+		sameSite: 'lax',
+	}
 }));
 app.use(connect_flash());