Merge branch '6179-improve-session-security' into 'develop'

Resolve "Improve session security" Closes #6179 See merge request ispconfig/ispconfig3!1488
cyberkathosting · Jun 8, 2021 · 36cdb85 · 36cdb85
2 parents 3ecd395 + cabf603
commit 36cdb85
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/interface/lib/app.inc.php b/interface/lib/app.inc.php
@@ -126,6 +126,9 @@ public function initialize_session() {
 				array($this->session, 'destroy'),
 				array($this->session, 'gc'));
 
+			ini_set('session.cookie_httponly', true);
+			@ini_set('session.cookie_samesite', 'Lax');
+
 			session_start();
 
 			//* Initialize session variables