mirror of
https://github.com/opencloud-eu/opencloud.git
synced 2025-12-31 01:10:20 -06:00
docs: clarify changelog
This commit is contained in:
@@ -1,4 +1,4 @@
|
||||
Enhancement: Make IDP cookies same site strict
|
||||
Bugfix: Make IDP cookies same site strict
|
||||
|
||||
To enhance the security of our application and prevent Cross-Site Request Forgery (CSRF) attacks, we have updated the
|
||||
SameSite attribute of the build in Identity Provider (IDP) cookies to Strict.
|
||||
@@ -9,4 +9,6 @@ thereby limiting the exposure of the user's session to potential threats.
|
||||
This update does not impact the existing functionality of the application but provides an additional layer of security
|
||||
where needed.
|
||||
|
||||
This only affects cookies set by the built-in IDP. Production systems should not be affected.
|
||||
|
||||
https://github.com/owncloud/ocis/pull/8716
|
||||
|
||||
Reference in New Issue
Block a user