mirror of
https://github.com/fusionpbx/fusionpbx.git
synced 2025-12-30 00:53:50 +00:00
Security - Secure session cookies by setting HttpOnly, Secure, and SameSite attributes (#7529)
This commit is contained in:
@@ -91,6 +91,9 @@
|
||||
//start the session if not using the command line
|
||||
global $no_session;
|
||||
if (!defined('STDIN') && empty($no_session)) {
|
||||
ini_set('session.cookie_httponly', 'true');
|
||||
ini_set('session.cookie_secure', 'true');
|
||||
ini_set('session.cookie_samesite', 'Lax');
|
||||
session_start();
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user