[TikiWiki-commits] [Git][tikiwiki/tiki][30.x] [FIX] Set SameSite attribute to 'Strict' for non-embedded Tiki content
"luci \(@luciash\) via TikiWiki-cvs" <[email protected]>
| Newsgroups | gmane.comp.cms.tiki.cvs |
|---|---|
| Message-ID | <6a0eb5c87cc5b_38198bb020299@gitlab-sidekiq-low-urgency-cpu-bound-v2-7bf674bdbb-7f8dm.mail> |
luci pushed to branch 30.x at Tiki Wiki CMS Groupware / Tiki
Commits:
e590b58a by Rodriguez Nyiringabo at 2026-05-21T07:29:17+00:00
[FIX] Set SameSite attribute to 'Strict' for non-embedded Tiki content
---
* [FIX] Set SameSite attribute to 'Strict' for non-embedded Tiki content
---
* [FIX] Set SameSite attribute to 'Strict' for non-embedded Tiki content
See merge request tikiwiki/tiki!9905
See merge request tikiwiki/tiki!10263
- - - - -
1 changed file:
- tiki-setup_base.php
Changes:
=====================================
tiki-setup_base.php
=====================================
@@ -252,6 +252,8 @@ if (isset($_SERVER["REQUEST_URI"]) && ! str_contains($_SERVER['REQUEST_URI'], 't
if (! empty($_REQUEST['embed'])) {
$session_params['secure'] = true;
$session_params['samesite'] = 'None';
+ } else {
+ $session_params['samesite'] = 'Strict';
}
session_set_cookie_params([
View it on GitLab: https://gitlab.com/tikiwiki/tiki/-/commit/e590b58ac7041cbe60212cc7a8a93e21cad0fd05
--
View it on GitLab: https://gitlab.com/tikiwiki/tiki/-/commit/e590b58ac7041cbe60212cc7a8a93e21cad0fd05
You're receiving this email because of your account on gitlab.com. Manage all notifications: https://gitlab.com/-/profile/notifications | Help: https://gitlab.com/help
_______________________________________________
TikiWiki-cvs mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/tikiwiki-cvs