Set samesite for session ZMSESSID cookie for php < 7.3

2026-02-07 04:51:14 -05:00 · 2022-05-10 17:48:16 -04:00
parent bc8677e333
commit 51ffc05c4d
1 changed files with 1 additions and 1 deletions
--- a/web/includes/session.php
+++ b/web/includes/session.php
@@ -30,7 +30,7 @@ function zm_session_start() {
    if ( version_compare(phpversion(), '7.3.0', '<') ) {
      session_set_cookie_params(
        $currentCookieParams['lifetime'],
-        $currentCookieParams['path'],
+        $currentCookieParams['path'].'; samesite=strict',
        $currentCookieParams['domain'],
        $currentCookieParams['secure'],
        $currentCookieParams['httponly']