Files
spring-boot/module/spring-boot-session
Phillip Webb ea564d21e0 Ensure that the session same site defaults to "lax"
Remove the `always()` call from the same site mapping and replace `as`
with a direct call. This update means that mapping only occurs when
`getSameSite` is not `null`, but mapping can still be applied if
`sameSite.getAttributeValue()` returns `null`.

Closes gh-48830
2026-01-15 17:36:56 -08:00
..