set cookie SameSite option to 'Lax' for loginlinks to work as intended; fixes #1299
Signed-off-by: Michael Kaufmann <d00p@froxlor.org>
This commit is contained in:
@@ -121,7 +121,7 @@ class UI
|
||||
'domain' => self::getCookieHost(),
|
||||
'secure' => self::requestIsHttps(),
|
||||
'httponly' => true,
|
||||
'samesite' => 'Strict'
|
||||
'samesite' => 'Lax'
|
||||
]);
|
||||
session_start();
|
||||
|
||||
|
||||
@@ -374,7 +374,7 @@ if (CurrentUser::hasSession()) {
|
||||
'domain' => UI::getCookieHost(),
|
||||
'secure' => UI::requestIsHttps(),
|
||||
'httponly' => true,
|
||||
'samesite' => 'Strict'
|
||||
'samesite' => 'Lax'
|
||||
];
|
||||
setcookie(session_name(), $_COOKIE[session_name()], $cookie_params);
|
||||
} else {
|
||||
|
||||
Reference in New Issue
Block a user