public
nobgit
read
NobMail
Based on mailcow: dockerized
Languages
Repository composition by tracked source files.
PHP
49%
JavaScript
35%
HTML
9%
CSS
4%
Shell
2%
Python
1%
Lua
0%
Perl
0%
Ruby
0%
SCSS
0%
Create file
Wiki Documentation
Clone
https://nobgit.com/orgs/nobgit/nobmail.git
ssh://[email protected]:2222/orgs/nobgit/nobmail.git
Commit
[Web] make SameSite policy and cookie name configurable via vars.local.inc
1ef01490
data/web/inc/sessions.inc.php | 4 ++--
data/web/inc/vars.inc.php | 7 +++++++
2 files changed, 9 insertions(+), 2 deletions(-)Diff
diff --git a/data/web/inc/sessions.inc.php b/data/web/inc/sessions.inc.php
index 68b3d558..8f3192d7 100644
--- a/data/web/inc/sessions.inc.php
+++ b/data/web/inc/sessions.inc.php
@@ -1,9 +1,9 @@
<?php
// Start session
if (session_status() !== PHP_SESSION_ACTIVE) {
- session_name('MCSESSID');
+ session_name($SESSION_NAME);
ini_set("session.cookie_httponly", 1);
- ini_set("session.cookie_samesite", "Lax");
+ ini_set("session.cookie_samesite", $SESSION_SAMESITE_POLICY);
ini_set('session.gc_maxlifetime', $SESSION_LIFETIME);
}
diff --git a/data/web/inc/vars.inc.php b/data/web/inc/vars.inc.php
index 56810530..a24752a6 100644
--- a/data/web/inc/vars.inc.php
+++ b/data/web/inc/vars.inc.php
@@ -153,6 +153,13 @@ $LOG_PAGINATION_SIZE = 50;
// Session lifetime in seconds
$SESSION_LIFETIME = 10800;
+// Session SameSite Policy
+// Use "None", "Lax" or "Strict"
+$SESSION_SAMESITE_POLICY = "Lax";
+
+// Name of the session cookie
+$SESSION_NAME = "MCSESSID";
+
// Label for OTP devices
$OTP_LABEL = "mailcow UI";