phpmyadmin/libraries/plugins/auth
Michal Čihař 7adff6b57c Indicate when HTTPS is not properly reported on the server
This can happen in both directions which both can have undesired side
effects:

- when server thinks it's serving HTTPS, but it's not, the cookies are
  set as secure and thus never returned back by client
- whene server thinks it's not serving HTTPS, the secure flag for
  cookies is not set, making it possible to leak them over HTTP

Fixes #13110

Signed-off-by: Michal Čihař <michal@cihar.com>
2017-03-21 08:46:38 +01:00
..
AuthenticationConfig.php Simplify Response object handling 2016-12-07 18:17:59 +01:00
AuthenticationCookie.php Indicate when HTTPS is not properly reported on the server 2017-03-21 08:46:38 +01:00
AuthenticationHttp.php Remove no longer needed code in authentication 2017-02-20 17:39:21 +01:00
AuthenticationSignon.php Merge remote-tracking branch 'origin/pull/12799' 2017-01-02 16:15:58 +01:00