[TikiWiki-commits] [Git][tikiwiki/tiki][27.x] [FIX] Set SameSite attribute to 'Lax' by default for non-embedded content

Rodriguez Nyiringabo pushed to branch 27.x at Tiki Wiki CMS Groupware / Tiki


Commits:
132d5972 by Rodriguez Nyiringabo at 2026-05-27T11:56:13+00:00
[FIX] Set SameSite attribute to 'Lax' by default for non-embedded content
---
* [FIX] Set SameSite attribute to 'Lax' by default for non-embedded content
---
* [FIX] Set SameSite attribute to 'Lax' by default for non-embedded content
---
* [FIX] Set SameSite attribute to 'Lax' by default for non-embedded content
---
* [FIX] Set SameSite attribute to 'Lax' by default for non-embedded content

See merge request tikiwiki/tiki!10280

See merge request tikiwiki/tiki!10376

See merge request tikiwiki/tiki!10379

See merge request tikiwiki/tiki!10382

- - - - -


1 changed file:

- tiki-setup_base.php


Changes:

=====================================
tiki-setup_base.php
=====================================
@@ -265,6 +265,8 @@ if (isset($_SERVER["REQUEST_URI"]) && strstr($_SERVER['REQUEST_URI'], 'tiki-real
         if (! empty($_REQUEST['embed'])) {
             $session_params['secure'] = true;
             $session_params['samesite'] = 'None';
+        } else {
+            $session_params['samesite'] = 'Lax';
         }
         session_set_cookie_params([
             'lifetime' => $session_params['lifetime'],



View it on GitLab: https://gitlab.com/tikiwiki/tiki/-/commit/132d59725ef58e266fb954127df0343a7fdda7d3

-- 
View it on GitLab: https://gitlab.com/tikiwiki/tiki/-/commit/132d59725ef58e266fb954127df0343a7fdda7d3
You're receiving this email because of your account on gitlab.com. Manage all notifications: https://gitlab.com/-/profile/notifications | Help: https://gitlab.com/help

_______________________________________________
TikiWiki-cvs mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/tikiwiki-cvs