Fixed private mode cookie for local development (#17938)

fixes #17514 - good explanation in #17938 (comment) - fixes setting the private mode cookie in stricter browsers for local development
TryGhost · Oct 16, 2023 · f303eee · f303eee
1 parent 4297339
commit f303eee
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/ghost/core/core/frontend/apps/private-blogging/lib/middleware.js b/ghost/core/core/frontend/apps/private-blogging/lib/middleware.js
@@ -55,7 +55,8 @@ const privateBlogging = {
             name: 'ghost-private',
             maxAge: constants.ONE_MONTH_MS,
             signed: false,
-            sameSite: 'none'
+            sameSite: urlUtils.isSSL(config.get('url')) ? 'none' : 'lax',
+            secure: urlUtils.isSSL(config.get('url'))
         })(req, res, next);
     },