dvkei/Pterodactyl-Panel
1
0
Fork 0
forked from Alex/Pterodactyl-Panel
Code Issues Pull Requests Projects Releases Wiki Activity

Change SameSite attribute on session cookies to "lax" (#2592)

Browse Source
This commit is contained in:
Anders G. Jørgensen 2020-10-25 21:15:49 +01:00 committed by GitHub
parent cfaf41ce24
commit a271b59092
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
app/Console/Commands/Environment/AppSettingsCommand.php
View File

@ -144,6 +144,11 @@ class AppSettingsCommand extends Command
$this->variables['APP_ENVIRONMENT_ONLY'] = $this->confirm(trans('command/messages.environment.app.settings'), true) ? 'false' : 'true';
}
// Make sure session cookies are set as "secure" when using HTTPS
if (strpos($this->variables['APP_URL'], 'https://') === 0) {
$this->variables['SESSION_SECURE_COOKIE'] = 'true';
}
$this->checkForRedis();
$this->writeToEnvironment($this->variables);

2
config/session.php
View File

@ -188,5 +188,5 @@ return [
|
*/
'same_site' => null,
'same_site' => env('SESSION_SAMESITE_COOKIE', 'lax'),
];