Add HTTPOnly and SameSite and fix filename export

4 files changed, 4 insertions, 4 deletions

diff --git a/app/Controllers/Http/DashboardController.js b/app/Controllers/Http/DashboardController.js
index e7c38c2..611cd4e 100644
--- a/app/Controllers/Http/DashboardController.js
+++ b/app/Controllers/Http/DashboardController.js
@@ -205,7 +205,7 @@ class DashboardController {
 
     return response
       .header('Content-Type', 'application/force-download')
-      .header('Content-disposition', 'attachment; filename=export.ferdi-data')
+      .header('Content-disposition', 'attachment; filename=export.ferdium-data')
       .send(exportData);
   }
 
diff --git a/config/app.js b/config/app.js
index 4d36c7b..30e44f0 100644
--- a/config/app.js
+++ b/config/app.js
@@ -235,7 +235,7 @@ module.exports = {
   */
   cookie: {
     httpOnly: true,
-    sameSite: false,
+    sameSite: true,
     path: '/',
     maxAge: 7200,
   },
diff --git a/config/session.js b/config/session.js
index bce28bd..b2174da 100644
--- a/config/session.js
+++ b/config/session.js
@@ -64,7 +64,7 @@ module.exports = {
   cookie: {
     httpOnly: true,
     path: '/',
-    sameSite: false,
+    sameSite: true,
   },
 
   /*
diff --git a/config/shield.js b/config/shield.js
index 5c1c5cd..9849d29 100644
--- a/config/shield.js
+++ b/config/shield.js
@@ -135,7 +135,7 @@ module.exports = {
     methods: ['POST', 'PUT', 'DELETE'],
     filterUris: [],
     cookieOptions: {
-      httpOnly: false,
+      httpOnly: true,
       sameSite: true,
       path: '/',
       maxAge: 7200,