QPR Knowledge Base 2026.1
|
Cookies Now Use samesite=strict by Default, with an Option for lax and none (B-08769) |
Scroll Prev Top Next More |
The samesite attribute is now strict by default for the cookies set by QPR Portal. There is a configuration option for setting it to none or lax instead, if this is needed for example for embedding QPR Portal within another site.
In addition, the previously existing secure_cookies configuration option is now auto (2) by default, which means that all cookies have the secure flag set when https is used.
