From f74952aa5580c8ef1dfa6564ac0c99456dd51be1 Mon Sep 17 00:00:00 2001 From: Lari Taskula Date: Sun, 26 Oct 2025 13:40:46 +0200 Subject: [PATCH] Bug 41104: Remove -sameSite from checkauth() response headers To test: 1. prove t/db_dependent/Auth.t 2. Observe success Signed-off-by: David Cook Signed-off-by: Jonathan Druart --- C4/Auth.pm | 1 - 1 file changed, 1 deletion(-) diff --git a/C4/Auth.pm b/C4/Auth.pm index 39f3889867b..9776e8bc442 100644 --- a/C4/Auth.pm +++ b/C4/Auth.pm @@ -1616,7 +1616,6 @@ sub checkauth { charset => 'utf-8', cookie => $cookie, 'X-Frame-Options' => 'SAMEORIGIN', - -sameSite => 'Lax' } ), $template->output; -- 2.34.1