mirror of
https://github.com/moodle/moodle.git
synced 2025-03-22 00:20:37 +01:00
30e2af60f1
The MoodleSession cookie is already set this way when using Chrome, but not for Firefox. This is a decision made in \core\session\manager. When Firefox eventually defaults to SameSite=Lax when the SameSite attribute is omitted from the Set-Cookie headers, the MoodleSession cookie won't be sent. This change ensures the cookies used during LTI launches will continue to work if/when this happens, and despite any changes which may be made to core's sessionlib in future.