Set samesite for session ZMSESSID cookie for php < 7.3

2026-05-24 22:47:06 -04:00 · 2022-05-10 17:48:16 -04:00
parent 3b642fde97
commit e26aa6d0ae
1 changed files with 1 additions and 1 deletions
--- a/web/includes/session.php
+++ b/web/includes/session.php
@@ -30,7 +30,7 @@ function zm_session_start() {
    if ( version_compare(phpversion(), '7.3.0', '<') ) {
      session_set_cookie_params(
        $currentCookieParams['lifetime'],
-        $currentCookieParams['path'],
+        $currentCookieParams['path'].'; samesite=strict',
        $currentCookieParams['domain'],
        $currentCookieParams['secure'],
        $currentCookieParams['httponly']