One of the first things I "fix" in a new Laravel project:
SESSION_SECURE_COOKIE=true

Secure cookies are essential, so make sure they are enabled.
https://securinglaravel.com/p/security-tip-the-cookie-secure-flag

Comments