Merge pull request #37305 from nextcloud/fix/security/log-failing-strict-cookie-check

fix(security): Log failing strict cookie check
pull/37397/head
Julius Härtl 1 year ago committed by GitHub
commit c3a39cbc75
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

@ -565,6 +565,7 @@ class OC {
// All other endpoints require the lax and the strict cookie
if (!$request->passesStrictCookieCheck()) {
logger('core')->warning('Request does not pass strict cookie check');
self::sendSameSiteCookies();
// Debug mode gets access to the resources without strict cookie
// due to the fact that the SabreDAV browser also lives there.

Loading…
Cancel
Save