Merge pull request #252 from PerimeterX/release/v3.4.3

Release/v3.4.3

Author: etrpx

CHANGELOG.md

@@ -5,6 +5,12 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](http://keepachangelog.com/)
 and this project adheres to [Semantic Versioning](http://semver.org/).
 
+## [3.4.3] - 2022-06-30
+
+### Fixed
+
+- pxhd cookie is now set with SameSite=Lax
+
 ## [3.4.2] - 2022-06-06
 
 ### Fixed

README.md

@@ -6,7 +6,7 @@
 [PerimeterX](http://www.perimeterx.com) Shared base for NodeJS enforcers
 =============================================================
 
-> Latest stable version: [v3.4.2](https://www.npmjs.com/package/perimeterx-node-core)
+> Latest stable version: [v3.4.3](https://www.npmjs.com/package/perimeterx-node-core)
 
 This is a shared base implementation for PerimeterX Express enforcer and future NodeJS enforcers. For a fully functioning implementation example, see the [Node-Express enforcer](https://github.com/PerimeterX/perimeterx-node-express/) implementation.
 

lib/pxenforcer.js

@@ -262,7 +262,7 @@ class PxEnforcer {
         if (res) {
             const setCookie = res.getHeader('Set-Cookie') ? res.getHeader('Set-Cookie') : '';
             const secure = this._config.PXHD_SECURE ? '; Secure' : '';
-            const pxhdCookie = ctx.pxhdServer ? `_pxhd=${ctx.pxhdServer} ${secure}` : '';
+            const pxhdCookie = ctx.pxhdServer ? `_pxhd=${ctx.pxhdServer} ${secure}; SameSite=Lax` : '';
             const setCookieModified = [setCookie, pxhdCookie].filter(Boolean);
             if (setCookieModified.length > 0) {
                 const expires = `expires=${new Date(

package.json

@@ -1,6 +1,6 @@
 {
     "name": "perimeterx-node-core",
-    "version": "3.4.2",
+    "version": "3.4.3",
     "description": "PerimeterX NodeJS shared core for various applications to monitor and block traffic according to PerimeterX risk score",
     "main": "index.js",
     "scripts": {