Skip to content

Commit fe44f34

Browse files
gschadenGerhard Schaden
andauthored
Use sameSite setting in the session cookie (OpenMage#4827)
Co-authored-by: Gerhard Schaden <gerhard.schaden@skiline.cc>
1 parent 5e03d3c commit fe44f34

File tree

1 file changed

+2
-1
lines changed
  • app/code/core/Mage/Core/Model/Session/Abstract

1 file changed

+2
-1
lines changed

app/code/core/Mage/Core/Model/Session/Abstract/Varien.php

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -106,6 +106,7 @@ public function start($sessionName = null)
106106
'domain' => $cookie->getConfigDomain(),
107107
'secure' => $cookie->isSecure(),
108108
'httponly' => $cookie->getHttponly(),
109+
'samesite' => $cookie->getSameSite(),
109110
];
110111

111112
if (!$cookieParams['httponly']) {
@@ -122,7 +123,7 @@ public function start($sessionName = null)
122123
$cookieParams['domain'] = $cookie->getDomain();
123124
}
124125

125-
call_user_func_array('session_set_cookie_params', array_values($cookieParams));
126+
session_set_cookie_params($cookieParams);
126127

127128
if (!empty($sessionName)) {
128129
$this->setSessionName($sessionName);

0 commit comments

Comments
 (0)