[TikiWiki-commits] [Git][tikiwiki/tiki][30.x] [FIX] Set SameSite attribute to 'Strict' for non-embedded Tiki content

"luci \(@luciash\) via TikiWiki-cvs" <[email protected]>
Newsgroups gmane.comp.cms.tiki.cvs
Message-ID <6a0eb5c87cc5b_38198bb020299@gitlab-sidekiq-low-urgency-cpu-bound-v2-7bf674bdbb-7f8dm.mail>

luci pushed to branch 30.x at Tiki Wiki CMS Groupware / Tiki


Commits:
e590b58a by Rodriguez Nyiringabo at 2026-05-21T07:29:17+00:00
[FIX] Set SameSite attribute to 'Strict' for non-embedded Tiki content
---
* [FIX] Set SameSite attribute to 'Strict' for non-embedded Tiki content
---
* [FIX] Set SameSite attribute to 'Strict' for non-embedded Tiki content

See merge request tikiwiki/tiki!9905

See merge request tikiwiki/tiki!10263

- - - - -


1 changed file:

- tiki-setup_base.php


Changes:

=====================================
tiki-setup_base.php
=====================================
@@ -252,6 +252,8 @@ if (isset($_SERVER["REQUEST_URI"]) && ! str_contains($_SERVER['REQUEST_URI'], 't
         if (! empty($_REQUEST['embed'])) {
             $session_params['secure'] = true;
             $session_params['samesite'] = 'None';
+        } else {
+            $session_params['samesite'] = 'Strict';
         }
 
         session_set_cookie_params([



View it on GitLab: https://gitlab.com/tikiwiki/tiki/-/commit/e590b58ac7041cbe60212cc7a8a93e21cad0fd05

-- 
View it on GitLab: https://gitlab.com/tikiwiki/tiki/-/commit/e590b58ac7041cbe60212cc7a8a93e21cad0fd05
You're receiving this email because of your account on gitlab.com. Manage all notifications: https://gitlab.com/-/profile/notifications | Help: https://gitlab.com/help

_______________________________________________
TikiWiki-cvs mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/tikiwiki-cvs
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.