Feature #87301
closedAutomatically use secure cookies
100%
Description
TYPO3 allows to make use of security cookies by setting according TYPO3_CONF_VARS [SYS][cookieSecure]
in Install Tool. In order to apply strong security defaults, this setting should always be active and use security cookies when HTTPS is used.
Updated by Benni Mack over 4 years ago
- Status changed from New to Needs Feedback
Should we set the option to "2" by default?
Updated by Benni Mack over 4 years ago
- Sprint Focus changed from PRC to Needs Decision
Updated by Gerrit Code Review about 4 years ago
- Status changed from Needs Feedback to Under Review
Patch set 1 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/65695
Updated by Gerrit Code Review about 4 years ago
Patch set 2 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/65695
Updated by Gerrit Code Review about 4 years ago
Patch set 3 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/65695
Updated by Benni Mack about 4 years ago
- Status changed from Under Review to Resolved
- % Done changed from 0 to 100
Applied in changeset b180b547c98a3f2cfb757a5178d9a77d1ad2977e.