From c9317f538c3633243d0f0a4be037957f3d72fbb1 Mon Sep 17 00:00:00 2001
From: Livio Amstutz <livio.a@gmail.com>
Date: Mon, 2 Dec 2019 13:40:08 +0100
Subject: [PATCH] default samesite to lax

---
 pkg/utils/cookie.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkg/utils/cookie.go b/pkg/utils/cookie.go
index 52002d7..d9c6f11 100644
--- a/pkg/utils/cookie.go
+++ b/pkg/utils/cookie.go
@@ -19,7 +19,7 @@ func NewCookieHandler(hashKey, encryptKey []byte, opts ...CookieHandlerOpt) *Coo
 	c := &CookieHandler{
 		securecookie: securecookie.New(hashKey, encryptKey),
 		secureOnly:   true,
-		sameSite:     http.SameSiteNoneMode,
+		sameSite:     http.SameSiteLaxMode,
 	}
 
 	for _, opt := range opts {