From 168d85c6a1a6a96bc7356335a0a03cfe11172c4c Mon Sep 17 00:00:00 2001 From: Lari Taskula Date: Sun, 26 Oct 2025 13:40:46 +0200 Subject: [PATCH] Bug 41104: Remove -sameSite from checkauth() response headers To test: 1. prove t/db_dependent/Auth.t 2. Observe success Signed-off-by: David Cook --- C4/Auth.pm | 1 - 1 file changed, 1 deletion(-) diff --git a/C4/Auth.pm b/C4/Auth.pm index 20242735e1..2b29d1f2d2 100644 --- a/C4/Auth.pm +++ b/C4/Auth.pm @@ -1625,7 +1625,6 @@ sub checkauth { charset => 'utf-8', cookie => $cookie, 'X-Frame-Options' => 'SAMEORIGIN', - -sameSite => 'Lax' } ), $template->output; -- 2.39.5