[TikiWiki-commits] [Git][tikiwiki/tiki][master] [FIX] Set SameSite attribute to 'Lax' by default for non-embedded content

Benoit Grégoire pushed to branch master at Tiki Wiki CMS Groupware / Tiki


Commits:
8058ddb4 by Rodriguez Nyiringabo at 2026-05-25T13:48:10+00:00
[FIX] Set SameSite attribute to 'Lax' by default for non-embedded content
---
* [FIX] Set SameSite attribute to 'Lax' by default for non-embedded content

See merge request tikiwiki/tiki!10280

- - - - -


1 changed file:

- tiki-setup_base.php


Changes:

=====================================
tiki-setup_base.php
=====================================
@@ -253,7 +253,7 @@ if (isset($_SERVER["REQUEST_URI"]) && ! str_contains($_SERVER['REQUEST_URI'], 't
             $session_params['secure'] = true;
             $session_params['samesite'] = 'None';
         } else {
-            $session_params['samesite'] = 'Strict';
+            $session_params['samesite'] = 'Lax';
         }
 
         session_set_cookie_params([



View it on GitLab: https://gitlab.com/tikiwiki/tiki/-/commit/8058ddb4ff7652b2ec9659cff37767ec689e202a

-- 
View it on GitLab: https://gitlab.com/tikiwiki/tiki/-/commit/8058ddb4ff7652b2ec9659cff37767ec689e202a
You're receiving this email because of your account on gitlab.com. Manage all notifications: https://gitlab.com/-/profile/notifications | Help: https://gitlab.com/help

_______________________________________________
TikiWiki-cvs mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/tikiwiki-cvs