[TikiWiki-commits] [Git][tikiwiki/tiki][29.x] [FIX] Set SameSite attribute to 'Strict' for non-embedded Tiki content

Rodriguez Nyiringabo pushed to branch 29.x at Tiki Wiki CMS Groupware / Tiki


Commits:
6fb045ee by Rodriguez Nyiringabo at 2026-05-21T18:21:20+00:00
[FIX] Set SameSite attribute to 'Strict' for non-embedded Tiki content
---
* [FIX] Set SameSite attribute to 'Strict' for non-embedded Tiki content
---
* [FIX] Set SameSite attribute to 'Strict' for non-embedded Tiki content
---
* [FIX] Set SameSite attribute to 'Strict' for non-embedded Tiki content

See merge request tikiwiki/tiki!9905

See merge request tikiwiki/tiki!10263

See merge request tikiwiki/tiki!10268

- - - - -


1 changed file:

- tiki-setup_base.php


Changes:

=====================================
tiki-setup_base.php
=====================================
@@ -246,6 +246,8 @@ if (isset($_SERVER["REQUEST_URI"]) && ! str_contains($_SERVER['REQUEST_URI'], 't
         if (! empty($_REQUEST['embed'])) {
             $session_params['secure'] = true;
             $session_params['samesite'] = 'None';
+        } else {
+            $session_params['samesite'] = 'Strict';
         }
 
         session_set_cookie_params([



View it on GitLab: https://gitlab.com/tikiwiki/tiki/-/commit/6fb045ee632e4791e6d034a9d4adbcd7ef36c851

-- 
View it on GitLab: https://gitlab.com/tikiwiki/tiki/-/commit/6fb045ee632e4791e6d034a9d4adbcd7ef36c851
You're receiving this email because of your account on gitlab.com. Manage all notifications: https://gitlab.com/-/profile/notifications | Help: https://gitlab.com/help

_______________________________________________
TikiWiki-cvs mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/tikiwiki-cvs