Almost two years ago I wrote about how you can enable
SameSite cookies with IIS
on cookies that do not have the ability to be written as SameSite. Today I was helping a client on Apache do the same thing, here's how we can add
SameSite=lax
to a
JSESSIONID
cookie for example:
But suppose you just wanted to make all cookies set by your web app SameSite, you can just do this:
Header edit Set-Cookie ^(.\*)$ $1;SameSite=lax
Once unpublished, all posts by pfreitag will become hidden and only accessible to themselves.
If pfreitag is not suspended, they can still re-publish their posts from their dashboard.
