Update Web.config

SkillsFundingAgency · Sep 3, 2020 · 03fc79a · 03fc79a
1 parent 40d6e41
commit 03fc79a
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/src/SFA.DAS.EAS.Web/Web.config b/src/SFA.DAS.EAS.Web/Web.config
@@ -533,6 +533,18 @@
           </conditions>
           <action type="Rewrite" value="max-age=31536000; includeSubDomains; preload"/>
         </rule>
+        <rule name="Add SameSite" preCondition="No SameSite">
+          <match serverVariable="RESPONSE_Set_Cookie" pattern=".*" negate="false" />
+          <action type="Rewrite" value="{R:0}; SameSite=lax" />
+          <conditions>
+          </conditions>
+        </rule>
+        <preConditions>
+          <preCondition name="No SameSite">
+            <add input="{RESPONSE_Set_Cookie}" pattern="." />
+            <add input="{RESPONSE_Set_Cookie}" pattern="; SameSite=lax" negate="true" />
+          </preCondition>
+        </preConditions>
       </outboundRules>
     </rewrite>
     <handlers>