mastodon/config/initializers/session_store.rb

# Be sure to restart your server when you modify this file.

Rails.application.config.session_store :cookie_store,
  key: '_mastodon_session',
  secure: (Rails.env.production? || ENV['LOCAL_HTTPS'] == 'true'),
  same_site: :lax
Initial commit 2016-02-20 21:53:20 +00:00			`# Be sure to restart your server when you modify this file.`

Add Ruby 3.0 support (#16046) * Fix issues with POSIX::Spawn, Terrapin and Ruby 3.0 Also improve the Terrapin monkey-patch for the stderr/stdout issue. * Fix keyword argument handling throughout the codebase * Monkey-patch Paperclip to fix keyword arguments handling in validators * Change validation_extensions to please CodeClimate * Bump microformats from 4.2.1 to 4.3.1 * Allow Ruby 3.0 * Add Ruby 3.0 test target to CircleCI * Add test for admin dashboard warnings * Fix admin dashboard warnings on Ruby 3.0 2021-05-06 12:22:54 +00:00			`Rails.application.config.session_store :cookie_store,`
Fix cookies not having a SameSite attribute (#15098) 2020-11-06 10:57:14 +00:00			`key: '_mastodon_session',`
Drop dependency on secure_headers, fix response headers (#15712) * Drop dependency on secure_headers, use always_write_cookie instead * Fix cookies in Tor Hidden Services by moving configuration to application.rb * Instead of setting always_write_cookie at boot, monkey-patch ActionDispatch 2021-02-11 22:47:05 +00:00			`secure: (Rails.env.production? \|\| ENV['LOCAL_HTTPS'] == 'true'),`
Add Ruby 3.0 support (#16046) * Fix issues with POSIX::Spawn, Terrapin and Ruby 3.0 Also improve the Terrapin monkey-patch for the stderr/stdout issue. * Fix keyword argument handling throughout the codebase * Monkey-patch Paperclip to fix keyword arguments handling in validators * Change validation_extensions to please CodeClimate * Bump microformats from 4.2.1 to 4.3.1 * Allow Ruby 3.0 * Add Ruby 3.0 test target to CircleCI * Add test for admin dashboard warnings * Fix admin dashboard warnings on Ruby 3.0 2021-05-06 12:22:54 +00:00			`same_site: :lax`