From d5635f48d74f5fd1766a9d1d177cbff2a97cca05 Mon Sep 17 00:00:00 2001
From: Peter Ivanov <peter@microweber.com>
Date: Mon, 4 Apr 2022 11:17:57 +0300
Subject: [PATCH] update

---
 src/MicroweberPackages/Cart/routes/web.php | 27 +++++++++++++---------
 1 file changed, 16 insertions(+), 11 deletions(-)

diff --git a/src/MicroweberPackages/Cart/routes/web.php b/src/MicroweberPackages/Cart/routes/web.php
index 52563f4a9df..cc0ef2c4214 100644
--- a/src/MicroweberPackages/Cart/routes/web.php
+++ b/src/MicroweberPackages/Cart/routes/web.php
@@ -1,17 +1,22 @@
 <?php
 
-Route::name('api.')->prefix('api')->group(function() {
+Route::name('api.')
+    ->prefix('api')
+    ->middleware([
+        \MicroweberPackages\App\Http\Middleware\SameSiteRefererMiddleware::class
+    ])
+    ->group(function () {
 
-    Route::post('update_cart', function (\Illuminate\Http\Request $request) {
-        return update_cart($request->all());
-    });
+        Route::post('update_cart', function (\Illuminate\Http\Request $request) {
+            return update_cart($request->all());
+        });
 
-    Route::post('remove_cart_item', function (\Illuminate\Http\Request $request) {
-        return remove_cart_item($request->all());
-    });
+        Route::post('remove_cart_item', function (\Illuminate\Http\Request $request) {
+            return remove_cart_item($request->all());
+        });
 
-    Route::post('update_cart_item_qty', function (\Illuminate\Http\Request $request) {
-        return update_cart_item_qty($request->all());
-    });
+        Route::post('update_cart_item_qty', function (\Illuminate\Http\Request $request) {
+            return update_cart_item_qty($request->all());
+        });
 
-});
+    });