http icon indicating copy to clipboard operation
http copied to clipboard

Published 20 hours ago • verified publisher icon nette

Cookie nette-samesite

Open nargotik opened this issue 5 years ago • 6 comments

Hi, as far i saw this cookie is set on src/Bridges/HttpDI/HttpExtension.php

There is any reason for this cookie to cannot be optional or name changed ?

nargotik avatar Jun 12 '20 13:06 nargotik

Still not figure why this is this way .. and why cant the cookie be renamed.

nargotik avatar Nov 10 '20 00:11 nargotik

Why do you want to rename it?

dg avatar Nov 10 '20 01:11 dg

Because some projects don't need to say the visitors what technology they use, it makes part of security to don't pass information to visitors that provides crucial information about the system.

nargotik avatar Nov 10 '20 02:11 nargotik

@dg What you think about it ?

nargotik avatar Nov 14 '20 14:11 nargotik

Have added a PR with changes needed to add a new config variable: cookieNameStrict

PR: #189

nargotik avatar Dec 07 '20 00:12 nargotik

At the moment, it is difficult to make a clean solution, so I'll implement it in the next bigger version.

However, in nette/http 3.1 the name has changed to _nss which is not so noticeable.

dg avatar Jan 05 '21 21:01 dg