[php-src] Issue #7913: Vulnerability due to insecure default values for session.cookie_secure and session.cookie_httponly
| From: | etkaar | Date: | Tue, 11 Jan 2022 14:47:05 +0000 |
| Subject: | [php-src] Issue #7913: Vulnerability due to insecure default values for session.cookie_secure and session.cookie_httponly | ||
| Groups: | php.bugs | ||
| Request: | Send a blank email to php-bugs+get-238968@lists.php.net to get a copy of this message | ||
Issue: https://github.com/php/php-src/issues/7913
Comment Author: etkaar
Thank you for your answer! It might be not a bug, but I would consider defaulting to an unsafe value
as an vulnerability to be honest.