mirror of
https://github.com/moodle/moodle.git
synced 2025-01-17 21:49:15 +01:00
7d579dd4bb
The MoodleSession cookie is already set this way when using Chrome, but not for Firefox. This is a decision made in \core\session\manager. When Firefox eventually defaults to SameSite=Lax when the SameSite attribute is omitted from the Set-Cookie headers, the MoodleSession cookie won't be sent. This change ensures the cookies used during LTI launches will continue to work if/when this happens, and despite any changes which may be made to core's sessionlib in future.