This can happen in both directions which both can have undesired side effects: - when server thinks it's serving HTTPS, but it's not, the cookies are set as secure and thus never returned back by client - whene server thinks it's not serving HTTPS, the secure flag for cookies is not set, making it possible to leak them over HTTP Fixes #13110 Signed-off-by: Michal Čihař <michal@cihar.com> |
||
|---|---|---|
| .. | ||
| AuthenticationConfig.php | ||
| AuthenticationCookie.php | ||
| AuthenticationHttp.php | ||
| AuthenticationSignon.php | ||