Merge branch 'hotfix/v2.0.20'

server/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "tachi-server",
-	"version": "2.0.19",
+	"version": "2.0.20",
 	"description": "A score tracking server.",
 	"main": "js/index.js",
 	"private": true,

server/src/lib/constants/version.ts

@@ -4,7 +4,7 @@
 
 const MAJOR = 2;
 const MINOR = 0;
-const PATCH = 19;
+const PATCH = 20;
 
 // As is with all front-facing zkldi projects, the version names for tachi-server
 // are from an album I like. In this case, the album is Portishead - Dummy.

server/src/server/server.ts

@@ -37,7 +37,7 @@ const userSessionMiddleware = expressSession({
 	saveUninitialized: false,
 	cookie: {
 		secure: Environment.nodeEnv === "production" || ServerConfig.ENABLE_SERVER_HTTPS,
-		sameSite: "lax", // Very important. Without this, we're vulnerable to CSRF!
+		sameSite: "strict", // Very important. Without this, we're vulnerable to CSRF!
 	},
 });