set cookie SameSite option to 'Lax' for loginlinks to work as intended;

fixes #1299 Signed-off-by: Michael Kaufmann <[email protected]>
froxlor · Dec 10, 2024 · 0fb9357 · 0fb9357
1 parent 26c3c87
commit 0fb9357
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/lib/Froxlor/UI/Panel/UI.php b/lib/Froxlor/UI/Panel/UI.php
@@ -121,7 +121,7 @@ public static function sendHeaders()
 			'domain' => self::getCookieHost(),
 			'secure' => self::requestIsHttps(),
 			'httponly' => true,
-			'samesite' => 'Strict'
+			'samesite' => 'Lax'
 		]);
 		session_start();
 

diff --git a/lib/init.php b/lib/init.php
@@ -374,7 +374,7 @@
 		'domain' => UI::getCookieHost(),
 		'secure' => UI::requestIsHttps(),
 		'httponly' => true,
-		'samesite' => 'Strict'
+		'samesite' => 'Lax'
 	];
 	setcookie(session_name(), $_COOKIE[session_name()], $cookie_params);
 } else {