Change samesite cookie value to 'none' to allow for session riding
Change-Id: I2302ab48b4bc3ab333ff582a952853409a48471f
diff --git a/Changes b/Changes
index 1e37237..47a9833 100755
--- a/Changes
+++ b/Changes
@@ -1,4 +1,4 @@
-0.42 2021-04-20
+0.42 2021-04-28
- Added GitHub based CI for perl.
- Added further methods for communicating JSON Files
with the server to the APIs (lerepp).
@@ -10,6 +10,8 @@
- Added large footer.
- Make KorAP logo stay when side menu is active
(fixes #133).
+ - Change samesite to 'None' to temporarily
+ allow for session riding by plugins.
0.41 2021-03-01
- Introduce CORS headers to the proxy.
diff --git a/lib/Kalamar.pm b/lib/Kalamar.pm
index 7931870..a4893ad 100644
--- a/lib/Kalamar.pm
+++ b/lib/Kalamar.pm
@@ -82,6 +82,9 @@
# ... for cookie transport
$self->sessions->secure(1);
+ # Temporary for session riding
+ $self->sessions->samesite('None');
+
# For all pages
$self->hook(
before_dispatch => sub {