From 89be7f5dbc01eb8a16db53f9184576acd7b825b4 Mon Sep 17 00:00:00 2001
From: mcoder <mcoder902@gmail.com>
Date: Wed, 22 Jul 2026 00:20:32 +0330
Subject: [PATCH] add two more

---
 bootstrap/app.php  | 3 ++-
 config/session.php | 2 +-
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/bootstrap/app.php b/bootstrap/app.php
index 0cd093a..a56f9f5 100644
--- a/bootstrap/app.php
+++ b/bootstrap/app.php
@@ -15,10 +15,11 @@
         $middleware->web(append: [
             \App\Http\Middleware\VulnerableHeadersMiddleware::class,
         ]);
+        $middleware->trustProxies(at: '*');
         $middleware->validateCsrfTokens(except: [
             'csrf-target', // غیرفعال کردن CSRF برای این روت خاص
         ]);
     })
     ->withExceptions(function (Exceptions $exceptions) {
         //
-    })->create();
\ No newline at end of file
+    })->create();
diff --git a/config/session.php b/config/session.php
index c3494b5..12c31b3 100644
--- a/config/session.php
+++ b/config/session.php
@@ -199,7 +199,7 @@
     |
     */
 
-    'same_site' => env('SESSION_SAME_SITE', 'lax'),
+    'same_site' => env('SESSION_SAME_SITE', 'none'),
 
     /*
     |--------------------------------------------------------------------------