Set SameSite flag as strict for crossfeed-token. (#2274)

cisagov · Oct 25, 2023 · 1dd4ace · 1dd4ace
1 parent b6271c8
commit 1dd4ace
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/frontend/src/hooks/usePersistentState.ts b/frontend/src/hooks/usePersistentState.ts
@@ -21,6 +21,7 @@ export const usePersistentState = <T extends any = any>(
     if (key === 'token') {
       cookies.set('crossfeed-token', state, {
         domain: process.env.REACT_APP_COOKIE_DOMAIN,
+        sameSite: 'strict',
         secure: true
       });
     }