[serendipity-cvs] [s9y/Serendipity] e37732: Improve cookie security by setting samesite to str...

[onli <no...@gi...>]

  Branch: refs/heads/feature/tokens
  Home:   https://github.com/s9y/Serendipity
  Commit: e37732f797d2b8c4171bb2201caeafeb5d918fc9
      https://github.com/s9y/Serendipity/commit/e37732f797d2b8c4171bb2201caeafeb5d918fc9
  Author: onli <on...@pa...>
  Date:   2025-09-12 (Fri, 12 Sep 2025)

  Changed paths:
    M include/functions_config.inc.php

  Log Message:
  -----------
  Improve cookie security by setting samesite to strict by default


  Commit: b867a8edfdcc186b4ede154d93ca49f9a3ae408d
      https://github.com/s9y/Serendipity/commit/b867a8edfdcc186b4ede154d93ca49f9a3ae408d
  Author: onli <on...@pa...>
  Date:   2025-09-12 (Fri, 12 Sep 2025)

  Changed paths:
    M include/functions_config.inc.php

  Log Message:
  -----------
  Use a token from the db instead of the session id against CSRF
Allows for longer valid links without having to configure PHP's session lifetime


Compare: https://github.com/s9y/Serendipity/compare/e37732f797d2%5E...b867a8edfdcc

To unsubscribe from these emails, change your notification settings at https://github.com/s9y/Serendipity/settings/notifications