search

nette / http

🌐 Abstraction for HTTP request, response and session. Provides careful data sanitization and utility for URL and cookies manipulation.
https://doc.nette.org/http-request-response
Other
461 stars 87 forks source link

Cookie nette-samesite #182

Open nargotik opened 4 years ago

nargotik commented 4 years ago

Hi, as far i saw this cookie is set on src/Bridges/HttpDI/HttpExtension.php

There is any reason for this cookie to cannot be optional or name changed ?

nargotik commented 4 years ago

Still not figure why this is this way .. and why cant the cookie be renamed.

dg commented 4 years ago

Why do you want to rename it?

nargotik commented 4 years ago

Because some projects don't need to say the visitors what technology they use, it makes part of security to don't pass information to visitors that provides crucial information about the system.

nargotik commented 4 years ago

@dg What you think about it ?

nargotik commented 3 years ago

Have added a PR with changes needed to add a new config variable: cookieNameStrict

PR: #189

dg commented 3 years ago

At the moment, it is difficult to make a clean solution, so I'll implement it in the next bigger version.

However, in nette/http 3.1 the name has changed to _nss which is not so noticeable.