Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Security] Remember me: samesite cookie #10077

Merged
merged 1 commit into from
Jul 18, 2018
Merged

Conversation

dunglas
Copy link
Member

@dunglas dunglas commented Jul 17, 2018

fabpot added a commit to symfony/symfony that referenced this pull request Jul 18, 2018
…ie flag (dunglas)

This PR was merged into the 4.2-dev branch.

Discussion
----------

[Security] Remember me: allow to set the samesite cookie flag

| Q             | A
| ------------- | ---
| Branch?       | master
| Bug fix?      | no
| New feature?  | yes <!-- don't forget to update src/**/CHANGELOG.md files -->
| BC breaks?    | no     <!-- see https://symfony.com/bc -->
| Deprecations? |no <!-- don't forget to update UPGRADE-*.md and src/**/CHANGELOG.md files -->
| Tests pass?   | no
| Fixed tickets | no
| License       | MIT
| Doc PR        | symfony/symfony-docs#10077

This PR allows to set the [`samesite`](https://www.owasp.org/index.php/SameSite) cookie flag for remember me token cookies.

Commits
-------

337e8ef [Security] Remember me: allow to set the samesite cookie flag
@javiereguiluz javiereguiluz added this to the 4.2 milestone Jul 18, 2018
@javiereguiluz
Copy link
Member

Thanks Kévin.

@javiereguiluz javiereguiluz merged commit eefa182 into symfony:master Jul 18, 2018
javiereguiluz added a commit that referenced this pull request Jul 18, 2018
This PR was merged into the master branch.

Discussion
----------

[Security] Remember me: samesite cookie

symfony/symfony#27976

Commits
-------

eefa182 [Security] Remember me: samesite cookie
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants