config cookie same site to lax

apolloconfig · Nov 29, 2022 · 00d968a · 00d968a
1 parent 8824b7d
commit 00d968a
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/apollo-portal/src/main/resources/application.yml b/apollo-portal/src/main/resources/application.yml
@@ -38,6 +38,11 @@ server:
     enabled: true
   tomcat:
     use-relative-redirects: true
+  servlet:
+    session:
+      cookie:
+        # prevent csrf
+        same-site: Lax
 
 logging:
   file: