Titan session cookies set samesite to None

This commit is contained in:
Jeremy Zhang 2020-03-19 12:43:32 -07:00
parent e2f8189ec1
commit d43d015527
2 changed files with 3 additions and 1 deletions

View File

@ -10,9 +10,10 @@ asyncio_extras
kombu
redis
aioredis
Flask-Babel
Flask-Babel>=1.0.0
patreon
flask-redis
sqlalchemy
asyncio_redis
raven[flask]
Werkzeug>=1.0.0

View File

@ -38,6 +38,7 @@ app.config['RATELIMIT_STORAGE_URL'] = config["redis-uri"]
app.config['PERMANENT_SESSION_LIFETIME'] = timedelta(days=3)
app.config['REDIS_URL'] = config["redis-uri"]
app.config['MAX_CONTENT_LENGTH'] = 4 * 1024 * 1024 # Limit upload size to 4mb
app.config['SESSION_COOKIE_SAMESITE'] = "None"
app.secret_key = config['app-secret']
#sentry.init_app(app)