| Age | Commit message (Collapse) | Author |
|---|
|
This is required since the `die` is making php8 choke
|
|
This commit vastly simplifies the code of cookies-fiddling mechanisms.
|
|
* relax test to pass with 7.3
* skip test with 7.3 as samesite is broken + add TODO
|
|
Implement session encryption.
|
|
We forgot to set a return value to the setcookie function, thus always returning false. Since very few frameworks/developers are checking the return value, it went unnoticed until we played with Magento, who effectively checks the return value.
|
|
Previously, when a cookie was set with the `httpOnly` flag, it was automatically encrypted, due to a logic flaw. This is now fixed and tested.
|
|
This is done by using the "samesite" cookie attribute.
|
