Set SameSite=Strict attribute for ingress_session (#6556)

This commit is contained in:
Joakim Sørensen 2020-08-17 15:16:28 +02:00 committed by GitHub
parent 6c918e346b
commit 613470b44d
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -71,7 +71,7 @@ export const createHassioSession = async (hass: HomeAssistant) => {
"POST", "POST",
"hassio/ingress/session" "hassio/ingress/session"
); );
document.cookie = `ingress_session=${response.data.session};path=/api/hassio_ingress/`; document.cookie = `ingress_session=${response.data.session};path=/api/hassio_ingress/;SameSite=Strict`;
}; };
export const setSupervisorOption = async ( export const setSupervisorOption = async (