diff --git a/src/GaudiHTTP.IntegrationTests.Client/Shared/HttpbinEndpoints.cs b/src/GaudiHTTP.IntegrationTests.Client/Shared/HttpbinEndpoints.cs index 3074e39c..3582f2ac 100644 --- a/src/GaudiHTTP.IntegrationTests.Client/Shared/HttpbinEndpoints.cs +++ b/src/GaudiHTTP.IntegrationTests.Client/Shared/HttpbinEndpoints.cs @@ -118,7 +118,7 @@ private static async Task HandleSetCookies(HttpContext ctx) { var sanitizedKey = SanitizeCookieToken(kvp.Key); var sanitizedValue = SanitizeCookieToken(kvp.Value.ToString()); - ctx.Response.Cookies.Append(sanitizedKey, sanitizedValue, new CookieOptions { Path = "/" }); + ctx.Response.Cookies.Append(sanitizedKey, sanitizedValue, new CookieOptions { Path = "/", Secure = true, HttpOnly = true, SameSite = SameSiteMode.Lax }); } ctx.Response.StatusCode = 302; ctx.Response.Redirect("/cookies", permanent: false);