Merge pull request #6766 from mailcow/fix/samesite-cookie

[Web] set cookie SameSite attribute to Lax
This commit is contained in:
FreddleSpl0it 2025-09-23 12:36:11 +02:00 committed by GitHub
commit b2774fb50b
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -2,6 +2,7 @@
// Start session
if (session_status() !== PHP_SESSION_ACTIVE) {
ini_set("session.cookie_httponly", 1);
ini_set("session.cookie_samesite", "Lax");
ini_set('session.gc_maxlifetime', $SESSION_LIFETIME);
}