# Be sure to restart your server when you modify this file.

# Specify a serializer for the signed and encrypted cookie jars.
# Valid options are :json, :marshal, and :hybrid.
Rails.application.config.action_dispatch.cookies_serializer = :hybrid

# Be sure to restart your server when you modify this file.

# Specify a serializer for the signed and encrypted cookie jars.
# Valid options are :json, :marshal, and :hybrid.
Rails.application.config.action_dispatch.cookies_serializer = :json

Switch to the :json cookie serializer
Switch to the :json cookie serializer

As this avoids security issues with the :marshal serialization
approach. The :hybrid approach will have migrated the old cookies to
the new JSON approach, so this shouldn't cause any issues.
