Set samesite=strict coockies - will work starting php 7.3

owncloud · May 25, 2020 · 6e4ee95 · 6e4ee95
1 parent 61a14a8
commit 6e4ee95
Showing 1 changed file with 10 additions and 1 deletion.
diff --git a/lib/private/Session/CryptoWrapper.php b/lib/private/Session/CryptoWrapper.php
@@ -89,7 +89,16 @@ public function __construct(IConfig $config,
 				if ($webRoot === '') {
 					$webRoot = '/';
 				}
-				\setcookie(self::COOKIE_NAME, $this->passphrase, 0, $webRoot, '', $secureCookie, true);
+				$options = [
+					"expires" => 0,
+					"path" => $webRoot,
+					"domain" => '',
+					"secure" => $secureCookie,
+					"httponly" => true,
+					"samesite" => 'strict'
+				];
+
+				\setcookie(self::COOKIE_NAME, $this->passphrase, $options);
 			}
 		}
 	}