Add Same-Site Cookies option to session.php

This commit is contained in:
Kevin MacMartin 2017-09-26 12:03:25 -04:00
parent fa2595b531
commit 0bbb6c04db

View file

@ -179,4 +179,19 @@ return [
'http_only' => false,
/*
|--------------------------------------------------------------------------
| Same-Site Cookies
|--------------------------------------------------------------------------
|
| This option determines how your cookies behave when cross-site requests
| take place, and can be used to mitigate CSRF attacks. By default, we
| do not enable this as other CSRF protection services are in place.
|
| Supported: "lax", "strict"
|
*/
'same_site' => null,
];