Changes to permit login to the dev. server from recent browsers (such as Chrome 84)

- Legacy-Id: 18381
2020-08-19 13:25:25 +00:00 · 2020-08-19 13:25:25 +00:00 · 1318fe6914
parent 0f5d2b290f
commit 1318fe6914
1 changed files with 4 additions and 1 deletions
--- a/ietf/settings.py
+++ b/ietf/settings.py
@ -1238,4 +1238,7 @@ if SERVER_MODE != 'production':

    # Cannot have this set to True if we're using http: from the dev-server:
    CSRF_COOKIE_SECURE = False
-    SESSION_COOKIE_SECURE = False
+    CSRF_COOKIE_SAMESITE = 'Lax'
+    SESSION_COOKIE_SECURE = False
+    SESSION_COOKIE_SAMESITE = 'Lax'
+