mastodon/config/initializers/session_store.rb

# Be sure to restart your server when you modify this file.

Rails.application.config.session_store :cookie_store,
  key: '_mastodon_session',
  secure: false, # All cookies have their secure flag set by the force_ssl option in production
  same_site: :lax
Initial commit 2016-02-20 13:53:20 -08:00			`# Be sure to restart your server when you modify this file.`

Add Ruby 3.0 support (#16046) * Fix issues with POSIX::Spawn, Terrapin and Ruby 3.0 Also improve the Terrapin monkey-patch for the stderr/stdout issue. * Fix keyword argument handling throughout the codebase * Monkey-patch Paperclip to fix keyword arguments handling in validators * Change validation_extensions to please CodeClimate * Bump microformats from 4.2.1 to 4.3.1 * Allow Ruby 3.0 * Add Ruby 3.0 test target to CircleCI * Add test for admin dashboard warnings * Fix admin dashboard warnings on Ruby 3.0 2021-05-06 05:22:54 -07:00			`Rails.application.config.session_store :cookie_store,`
Fix cookies not having a SameSite attribute (#15098) 2020-11-06 02:57:14 -08:00			`key: '_mastodon_session',`
Fix cookies secure flag being set when served over Tor (#17992) 2022-04-08 03:47:18 -07:00			`secure: false, # All cookies have their secure flag set by the force_ssl option in production`
Add Ruby 3.0 support (#16046) * Fix issues with POSIX::Spawn, Terrapin and Ruby 3.0 Also improve the Terrapin monkey-patch for the stderr/stdout issue. * Fix keyword argument handling throughout the codebase * Monkey-patch Paperclip to fix keyword arguments handling in validators * Change validation_extensions to please CodeClimate * Bump microformats from 4.2.1 to 4.3.1 * Allow Ruby 3.0 * Add Ruby 3.0 test target to CircleCI * Add test for admin dashboard warnings * Fix admin dashboard warnings on Ruby 3.0 2021-05-06 05:22:54 -07:00			`same_site: :lax`