set cookie SameSite option to 'Lax' for loginlinks to work as intended; fixes #1299

Signed-off-by: Michael Kaufmann <d00p@froxlor.org>
This commit is contained in:
Michael Kaufmann
2024-12-10 20:15:41 +01:00
parent 26c3c87d28
commit 0fb9357e87
2 changed files with 2 additions and 2 deletions

View File

@@ -121,7 +121,7 @@ class UI
'domain' => self::getCookieHost(),
'secure' => self::requestIsHttps(),
'httponly' => true,
'samesite' => 'Strict'
'samesite' => 'Lax'
]);
session_start();

View File

@@ -374,7 +374,7 @@ if (CurrentUser::hasSession()) {
'domain' => UI::getCookieHost(),
'secure' => UI::requestIsHttps(),
'httponly' => true,
'samesite' => 'Strict'
'samesite' => 'Lax'
];
setcookie(session_name(), $_COOKIE[session_name()], $cookie_params);
} else {