Patch for Catalyst/Plugin/Session/State/Cookie.pm to add the SameSite header

samesite.patch

--- Catalyst/Plugin/Session/State/Cookie.pm.orig      2020-08-07 15:40:56.855643211 +0100
+++ Catalyst/Plugin/Session/State/Cookie.pm   2020-08-07 11:53:35.131890154 +0100
@@ -81,6 +81,10 @@
     $cookie->{httponly} = 1
         unless defined $cookie->{httponly}; # default = 1 (set httponly)

+    $cookie->{samesite} = $cfg->{cookie_samesite};
+    $cookie->{samesite} = "Lax"
+        unless defined $cookie->{ samesite}; # default = Lax
+
     return $cookie;
 }

Requires CGI::Simple::Cookie 1.18 or higher to support samesite

__PACKAGE__->config('Plugin::Session' => {
   cookie_samesite  => "Strict",  # or Lax or None
});