diff --git a/config/session.php b/config/session.php
index a0c9f76..c3494b5 100644
--- a/config/session.php
+++ b/config/session.php
@@ -199,7 +199,7 @@
|
*/
- 'same_site' => 'none',
+ 'same_site' => env('SESSION_SAME_SITE', 'lax'),
/*
|--------------------------------------------------------------------------
diff --git a/docker/nginx/default.conf b/docker/nginx/default.conf
index c2e24aa..e3701c4 100644
--- a/docker/nginx/default.conf
+++ b/docker/nginx/default.conf
@@ -1,6 +1,6 @@
server {
listen 80;
- server_name webapp.kr-rezvan.ir;
+ server_name webapp.kr-rezvan.ir blog.webapp.kr-rezvan.ir;
root /var/www/html/public;
index index.php;
diff --git a/resources/views/hacker/samesite-clickjacking.blade.php b/resources/views/hacker/samesite-clickjacking.blade.php
new file mode 100644
index 0000000..48f18f2
--- /dev/null
+++ b/resources/views/hacker/samesite-clickjacking.blade.php
@@ -0,0 +1,26 @@
+
+
+
+
+
+ Read our new Blog Post!
+
+
+
+ Check out our latest article!
+
+
+
+
+
+
\ No newline at end of file
diff --git a/routes/web.php b/routes/web.php
index 1f31684..7d1bf74 100644
--- a/routes/web.php
+++ b/routes/web.php
@@ -34,6 +34,17 @@
});
+/*
+|--------------------------------------------------------------------------
+| compromised subdomain (blog.webapp.kr-rezvan.ir)
+|--------------------------------------------------------------------------
+*/
+Route::domain('blog.webapp.kr-rezvan.ir')->group(function () {
+ Route::get('/clickjacking', function () {
+ return view('hacker.samesite-clickjacking');
+ })->name('samesite.clickjacking');
+});
+
/*
|--------------------------------------------------------------------------
| 🛡️ دامنه قربانی (Victim App) : webapp.kr-rezvan.ir