Added a note about cookie settings for browser clients (haskell-serva…

…nt#1748)
tchoutri · Apr 30, 2024 · 752e768 · 752e768
1 parent a570d2b
commit 752e768
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/doc/cookbook/hoist-server-with-context/HoistServerWithContext.lhs b/doc/cookbook/hoist-server-with-context/HoistServerWithContext.lhs
@@ -334,6 +334,8 @@ main = do
   Warp.runSettings settings $ warpLogger $ mkApp cfg cookieCfg jwtCfg ctx
 ```
 
+**Note for browser clients**: default cookie settings (`defaultCookieSettings`) may not be suitable for
+browser clients due to [XSRF protection](https://github.com/haskell-servant/servant/tree/master/servant-auth#xsrf-and-the-frontend).
 
 ## Usage