diff --git a/src/webui/webapplication.cpp b/src/webui/webapplication.cpp index 602973b25..7c8d96b13 100644 --- a/src/webui/webapplication.cpp +++ b/src/webui/webapplication.cpp @@ -656,7 +656,10 @@ void WebApplication::sessionStart() QNetworkCookie cookie(C_SID, m_currentSession->id().toUtf8()); cookie.setHttpOnly(true); cookie.setPath(QLatin1String("/")); - header(Http::HEADER_SET_COOKIE, cookie.toRawForm()); + QByteArray cookieRawForm = cookie.toRawForm(); + if (m_isCSRFProtectionEnabled) + cookieRawForm.append("; SameSite=Strict"); + header(Http::HEADER_SET_COOKIE, cookieRawForm); } void WebApplication::sessionEnd()