1 changed files with 1 additions and 1 deletions
--- a/app/controllers/application_controller.rb
+++ b/app/controllers/application_controller.rb
@ -59,7 +59,7 @@ class ApplicationController < ActionController::Base
  def set_csrf_cookie
    cookies['csrf-token'] = {
      value: form_authenticity_token,
-      secure: false,
+      secure: Rails.env.production?,
      same_site: :strict
    }
  end