[TikiWiki-commits] [Git][tikiwiki/tiki][master] [FIX] Set SameSite attribute to 'Strict' for non-embedded Tiki content
Benoit Grégoire (@benoitg) via TikiWiki-cvs <[email protected]>
| Newsgroups | gmane.comp.cms.tiki.cvs |
|---|---|
| Message-ID | <69d6950f7b0c_3b1911e4596b@gitlab-sidekiq-low-urgency-cpu-bound-v2-78bdc65746-g4tzx.mail> |
Benoit Grégoire pushed to branch master at Tiki Wiki CMS Groupware / Tiki
Commits:
29f36d3b by Rodriguez Nyiringabo at 2026-04-08T17:41:34+00:00
[FIX] Set SameSite attribute to 'Strict' for non-embedded Tiki content
---
* [FIX] Set SameSite attribute to 'Strict' for non-embedded Tiki content
See merge request tikiwiki/tiki!9905
- - - - -
1 changed file:
- tiki-setup_base.php
Changes:
=====================================
tiki-setup_base.php
=====================================
@@ -252,6 +252,8 @@ if (isset($_SERVER["REQUEST_URI"]) && ! str_contains($_SERVER['REQUEST_URI'], 't
if (! empty($_REQUEST['embed'])) {
$session_params['secure'] = true;
$session_params['samesite'] = 'None';
+ } else {
+ $session_params['samesite'] = 'Strict';
}
session_set_cookie_params([
View it on GitLab: https://gitlab.com/tikiwiki/tiki/-/commit/29f36d3bec3784653d7cb104fce0d232935751ed
--
View it on GitLab: https://gitlab.com/tikiwiki/tiki/-/commit/29f36d3bec3784653d7cb104fce0d232935751ed
You're receiving this email because of your account on gitlab.com. Manage all notifications: https://gitlab.com/-/profile/notifications | Help: https://gitlab.com/help
_______________________________________________
TikiWiki-cvs mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/tikiwiki-cvs