diff --git a/htagweb/runners.py b/htagweb/runners.py index 92616ab..9d4aab4 100644 --- a/htagweb/runners.py +++ b/htagweb/runners.py @@ -69,9 +69,9 @@ async def __call__(self, scope: Scope, receive: Receive, send: Send) -> None: else: uid = str(uuid.uuid4()) - security_flags = "httponly; samesite=none" + security_flags = "httponly" if connection.headers.get("X-Forwarded-Proto") == "https": # Secure flag can be used with HTTPS only - security_flags += "; secure" + security_flags += "; samesite=none ; secure" #!!!!!!!!!!!!!!!!!!!!!!!!!!! scope["uid"] = uid