This is an automated email from the ASF dual-hosted git repository.

sbp pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tooling-trusted-releases.git


The following commit(s) were added to refs/heads/main by this push:
     new 69dc859  Restore the ASFQuart default setting for SameSite
69dc859 is described below

commit 69dc859b480ff6ca6fdb68d6b7d7160cd110f311
Author: Sean B. Palmer <[email protected]>
AuthorDate: Thu Jan 22 16:09:57 2026 +0000

    Restore the ASFQuart default setting for SameSite
---
 atr/config.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/atr/config.py b/atr/config.py
index ea8fd40..0fceba1 100644
--- a/atr/config.py
+++ b/atr/config.py
@@ -114,10 +114,10 @@ class AppConfig:
     # Chunk size for reading files during extraction
     EXTRACT_CHUNK_SIZE: int = decouple.config("EXTRACT_CHUNK_SIZE", default=4 
* _MB, cast=int)
 
-    # session cookie security
+    # Session cookie security
     SESSION_COOKIE_SECURE = True
     SESSION_COOKIE_HTTPONLY = True
-    SESSION_COOKIE_SAMESITE = "Lax"
+    SESSION_COOKIE_SAMESITE = "Strict"
     SESSION_COOKIE_NAME = "__Host-session"
 
     # FIXME: retrieve the list of admin users from LDAP or oath session / 
isRoot


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to