From 0402cbe86168f54eaee8632e23ba2d9ec2ba093e Mon Sep 17 00:00:00 2001 From: Lari Taskula Date: Sun, 26 Oct 2025 13:40:46 +0200 Subject: [PATCH] Bug 41104: Remove -sameSite from checkauth() response headers To test: 1. prove t/db_dependent/Auth.t 2. Observe success --- C4/Auth.pm | 1 - 1 file changed, 1 deletion(-) diff --git a/C4/Auth.pm b/C4/Auth.pm index 20242735e1a..2b29d1f2d2c 100644 --- a/C4/Auth.pm +++ b/C4/Auth.pm @@ -1625,7 +1625,6 @@ sub checkauth { charset => 'utf-8', cookie => $cookie, 'X-Frame-Options' => 'SAMEORIGIN', - -sameSite => 'Lax' } ), $template->output; -- 2.34.1