[serendipity-cvs] [s9y/Serendipity] e37732: Improve cookie security by setting samesite to str...
onli via php-blog-cvs <[email protected]> Sat, 13 Sep 2025 07:23:04 -0700
| Newsgroups | gmane.comp.serendipity.cvs |
|---|---|
| Message-ID | <s9y/Serendipity/push/refs/heads/feature/tokens/[email protected]> |
Branch: refs/heads/feature/tokens
Home: https://github.com/s9y/Serendipity
Commit: e37732f797d2b8c4171bb2201caeafeb5d918fc9
https://github.com/s9y/Serendipity/commit/e37732f797d2b8c4171bb2201caeafeb5d918fc9
Author: onli <[email protected]>
Date: 2025-09-12 (Fri, 12 Sep 2025)
Changed paths:
M include/functions_config.inc.php
Log Message:
-----------
Improve cookie security by setting samesite to strict by default
Commit: b867a8edfdcc186b4ede154d93ca49f9a3ae408d
https://github.com/s9y/Serendipity/commit/b867a8edfdcc186b4ede154d93ca49f9a3ae408d
Author: onli <[email protected]>
Date: 2025-09-12 (Fri, 12 Sep 2025)
Changed paths:
M include/functions_config.inc.php
Log Message:
-----------
Use a token from the db instead of the session id against CSRF
Allows for longer valid links without having to configure PHP's session lifetime
Compare: https://github.com/s9y/Serendipity/compare/e37732f797d2%5E...b867a8edfdcc
To unsubscribe from these emails, change your notification settings at https://github.com/s9y/Serendipity/settings/notifications