Skip to content
Snippets Groups Projects
Commit b180b547 authored by Benni Mack's avatar Benni Mack
Browse files

[FEATURE] Enable secure cookies by default

The option $TYPO3_CONF_VARS[SYS][cookieSecure] is
removed in favor of always setting a secure cookie
on HTTPS requests.

This leads to errors when a page would be available
in HTTP and HTTPS which is normally not the case
when using a full site base in Site Handling anymore,
and making TYPO3 more secure out-of-the-box.

Resolves: #87301
Releases: master
Change-Id: Iba90c19456af6a82feb9c53fea52228fbff516be
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/65695


Tested-by: default avatarTYPO3com <noreply@typo3.com>
Tested-by: default avatarFrank Nägler <frank.naegler@typo3.org>
Tested-by: default avatarOliver Bartsch <bo@cedev.de>
Tested-by: default avatarBenni Mack <benni@typo3.org>
Reviewed-by: default avatarFrank Nägler <frank.naegler@typo3.org>
Reviewed-by: default avatarJörg Bösche <typo3@joergboesche.de>
Reviewed-by: default avatarOliver Bartsch <bo@cedev.de>
Reviewed-by: default avatarBenni Mack <benni@typo3.org>
parent 27593da1
Branches
Tags
No related merge requests found
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment