From b1240d3046ef10dedb51afddafbd8e7a229bd4f6 Mon Sep 17 00:00:00 2001
From: Jos Groot Lipman <jos.grootlipman@aareon.nl>
Date: Mon, 14 Jun 2021 18:03:11 +0000
Subject: [PATCH] FCLT#67404 SameSite=none moet een ;Secure krijgen

svn path=/Website/trunk/; revision=51929
---
 web.config.sample | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/web.config.sample b/web.config.sample
index af77d74cf4..7e41e449c4 100644
--- a/web.config.sample
+++ b/web.config.sample
@@ -8,7 +8,7 @@
                 <remove name="Add SameSite"/>
                 <rule name="Add SameSite" preCondition="No SameSite">
                     <match serverVariable="RESPONSE_Set_Cookie" pattern=".*" negate="false" />
-                    <action type="Rewrite" value="{R:0}; SameSite=none" />
+                    <action type="Rewrite" value="{R:0}; SameSite=none; Secure" />
                     <conditions>
                     </conditions>
                 </rule>
@@ -16,7 +16,7 @@
                     <remove name="No SameSite"/>
                     <preCondition name="No SameSite">
                         <add input="{RESPONSE_Set_Cookie}" pattern="." />
-                        <add input="{RESPONSE_Set_Cookie}" pattern="; SameSite=none" negate="true" />
+                        <add input="{RESPONSE_Set_Cookie}" pattern="; SameSite=none; Secure" negate="true" />
                     </preCondition>
                 </preConditions>
             </outboundRules>