fix: prevent stale htmx cache on login potentially causing csrf issues

addresses #869dd1fch
2026-07-10 14:30:31 +02:00
parent 2b957e1887
commit 9660149c67
3 changed files with 4 additions and 5 deletions
@@ -9,9 +9,8 @@ framework:
    # Remove or comment this section to explicitly disable session support.
    session:
        handler_id: null
-        cookie_secure: auto
-        # cookie_samesite: lax
-        cookie_samesite: none # this is to make login work in staging environment. to be removed when going live!
+        cookie_secure: true
+        cookie_samesite: lax

    #esi: true
    #fragments: true