diff --git a/configs/docker_config.py b/configs/docker_config.py index 2cc6310..7285252 100644 --- a/configs/docker_config.py +++ b/configs/docker_config.py @@ -2,6 +2,7 @@ BIND_ADDRESS = '0.0.0.0' PORT = 80 SQLALCHEMY_DATABASE_URI = 'sqlite:////data/powerdns-admin.db' +SESSION_COOKIE_SAMESITE = 'Lax' CSRF_COOKIE_HTTPONLY = True legal_envvars = ( diff --git a/powerdnsadmin/default_config.py b/powerdnsadmin/default_config.py index 8737680..93b97b7 100644 --- a/powerdnsadmin/default_config.py +++ b/powerdnsadmin/default_config.py @@ -10,6 +10,7 @@ PORT = 9191 HSTS_ENABLED = False OFFLINE_MODE = False FILESYSTEM_SESSIONS_ENABLED = False +SESSION_COOKIE_SAMESITE = 'Lax' CSRF_COOKIE_HTTPONLY = True ### DATABASE CONFIG diff --git a/requirements.txt b/requirements.txt index ce24450..ec2ecbb 100644 --- a/requirements.txt +++ b/requirements.txt @@ -18,7 +18,7 @@ pytz==2020.1 cssmin==0.2.0 jsmin==3.0.0 Authlib==0.15 -Flask-SeaSurf==0.2.2 +Flask-SeaSurf==1.1.1 bravado-core==5.17.0 lima==0.5 pytest==6.1.1