Loading...

XML

Word

Printable

Type: Improvement
Resolution: Unresolved
Priority: Minor
Fix Version/s: None
Affects Version/s: 3.3, 4.5
Component/s: Administration
Labels:

Affected Branches:
MOODLE_33_STABLE, MOODLE_405_STABLE

After ~~MDL-55273~~ cookiesecure now defaults to on. So secure cookies are used by default when using SSL. We should remove the setting unless there is a good use for turning it off when SSL is on.

Then the behaviour could be simple: Always use secure cookies when serving over SSL, and then never use secure cookies when not serving over SSL.

Discovered while testing

MDL-79712 Ensure SameSite=None on MoodleSession cookie to retain support for embedded launches

Closed

has to be done after

MDL-55273 cookiesecure doesn't default on

Closed

is blocked by

MDL-42834 Deprecate loginhttps

Closed

Assignee:: Unassigned

Reporter:: John Okely

Participants:: Andrew Lyons, Brendan Heywood, Dan Poltawski, Dave Balch, John Okely, Matt Porritt

Votes:: 4 Vote for this issue

Watchers:: 9 Start watching this issue

Created:: 23/Aug/16 6:07 PM

Updated:: 03/Jun/25 12:58 PM

Details

Description

Attachments

Issue Links

Activity

People

Dates

Clockify