[TikiWiki-commits] [Git][tikiwiki/tiki][29.x] [FIX] Set SameSite attribute to 'Lax' by default for non-embedded content

Rodriguez Nyiringabo pushed to branch 29.x at Tiki Wiki CMS Groupware / Tiki


Commits:
b33c0699 by Rodriguez Nyiringabo at 2026-05-26T22:45:11+00:00
[FIX] Set SameSite attribute to 'Lax' by default for non-embedded content
---
* [FIX] Set SameSite attribute to 'Lax' by default for non-embedded content
---
* [FIX] Set SameSite attribute to 'Lax' by default for non-embedded content
---
* [FIX] Set SameSite attribute to 'Lax' by default for non-embedded content

See merge request tikiwiki/tiki!10280

See merge request tikiwiki/tiki!10376

See merge request tikiwiki/tiki!10379

- - - - -


1 changed file:

- tiki-setup_base.php


Changes:

=====================================
tiki-setup_base.php
=====================================
@@ -247,7 +247,7 @@ if (isset($_SERVER["REQUEST_URI"]) && ! str_contains($_SERVER['REQUEST_URI'], 't
             $session_params['secure'] = true;
             $session_params['samesite'] = 'None';
         } else {
-            $session_params['samesite'] = 'Strict';
+            $session_params['samesite'] = 'Lax';
         }
 
         session_set_cookie_params([



View it on GitLab: https://gitlab.com/tikiwiki/tiki/-/commit/b33c0699c22f2b51e907d39a341dad19dbdc0958

-- 
View it on GitLab: https://gitlab.com/tikiwiki/tiki/-/commit/b33c0699c22f2b51e907d39a341dad19dbdc0958
You're receiving this email because of your account on gitlab.com. Manage all notifications: https://gitlab.com/-/profile/notifications | Help: https://gitlab.com/help

_______________________________________________
TikiWiki-cvs mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/tikiwiki-cvs