Removing csp console error (#2963)

* Removing csp console error

* Fixed activity page console error as well
This commit is contained in:
Alex Janousek
2025-10-01 19:50:35 -04:00
committed by GitHub
parent ce6eddd4e3
commit a4e1cc0d38
7 changed files with 78 additions and 39 deletions

View File

@@ -66,6 +66,7 @@ class Config(object):
SESSION_COOKIE_HTTPONLY = True
SESSION_COOKIE_NAME = "notify_admin_session"
SESSION_COOKIE_SECURE = True
SESSION_COOKIE_SAMESITE = "Lax"
# don't send back the cookie if it hasn't been modified by the request. this means that the expiry time won't be
# updated unless the session is changed - but it's generally refreshed by `save_service_or_org_after_request`
# every time anyway, except for specific endpoints (png/pdfs generally) where we've disabled that handler.