Skip to content

Conversation

@SaschaHowe
Copy link

No description provided.

Copilot AI review requested due to automatic review settings May 27, 2025 13:02
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR introduces default security settings for session cookies in the application framework configuration.

  • Enables HTTPS-only cookies (cookie_secure: true)
  • Sets a SameSite policy of lax to help mitigate CSRF risks

@HageMaster3108 HageMaster3108 merged commit c180069 into 11.x May 27, 2025
12 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants