Merge commit from fork

SECURITY: Consistently set samesite attribute on cookies
jpatokal · Aug 22, 2024 · 837ea05 · 837ea05
2 parents bbaa763 + b96ce6c
commit 837ea05
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/php/countries.php b/php/countries.php
@@ -1,6 +1,8 @@
 <?php
 
+session_set_cookie_params(['samesite' => 'Strict']);
 session_start();
+
 include_once 'db_pdo.php';
 
 // List of all countries

diff --git a/php/logout.php b/php/logout.php
@@ -1,4 +1,6 @@
 <?php
 
+session_set_cookie_params(['samesite' => 'Strict']);
 session_start();
+
 $_SESSION = [];