From 37d833db62ed73d108959224121efc2413f02ae6 Mon Sep 17 00:00:00 2001
From: Simon Detheridge <gh2k@users.noreply.github.com>
Date: Tue, 21 Jan 2020 10:57:18 +0000
Subject: [PATCH] Merge pull request #2537 from
 overleaf/spd-cookie-samesite-setting

Re-add missing sameSiteCookie setting

GitOrigin-RevId: be46affcc95b7e4c79f86503da933c6fcc277d4f
---
 services/web/app/src/infrastructure/Server.js | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/services/web/app/src/infrastructure/Server.js b/services/web/app/src/infrastructure/Server.js
index 9c10015721..eb5e271c8d 100644
--- a/services/web/app/src/infrastructure/Server.js
+++ b/services/web/app/src/infrastructure/Server.js
@@ -106,7 +106,8 @@ webRouter.use(
     cookie: {
       domain: Settings.cookieDomain,
       maxAge: Settings.cookieSessionLength, // in milliseconds, see https://github.com/expressjs/session#cookiemaxage
-      secure: Settings.secureCookie
+      secure: Settings.secureCookie,
+      sameSite: Settings.sameSiteCookie
     },
     store: sessionStore,
     key: Settings.cookieName,