fix(security): Log failing strict cookie check

The error is silent otherwise and makes it very hard to debug on a
production system.

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
pull/37305/head
Christoph Wurst 3 years ago
parent 8f59ff880f
commit 0e6fccf9e1
No known key found for this signature in database
GPG Key ID: CC42AC2A7F0E56D8
  1. 1
      lib/base.php

@ -561,6 +561,7 @@ class OC {
// All other endpoints require the lax and the strict cookie
if (!$request->passesStrictCookieCheck()) {
logger('core')->warning('Request does not pass strict cookie check');
self::sendSameSiteCookies();
// Debug mode gets access to the resources without strict cookie
// due to the fact that the SabreDAV browser also lives there.

Loading…
Cancel
Save