More flexibility in Cookie settings

Bug #1926370 reported by Gold
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Mahara
Triaged
Wishlist
Unassigned

Bug Description

This is a wishlist item...

We are currently loading some output from Mahara in a thirdparty iframe and we have issues with cookies being readable in that scenario. To get around this we are modifying the 'setcookie()' call in the 'clear_duplicate_cookies()' function in the 'htdocs/auth/session.php' file.

We are adding "; SameSite=None" to the path and hard coding the secure parameter to be true.

The proposal is to extend the '$SESSION' allowing these to be programatically set and checked for in the 'clear_duplicate_cookies()' function.

Changed in mahara:
milestone: none → 21.10.0
importance: Undecided → Wishlist
status: New → Triaged
tags: removed: wishlist
Changed in mahara:
milestone: 21.10.0 → none
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.