chore: Add comment to make it clear the bail out for status.php should

not be moved above ini_set calls.

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
This commit is contained in:
Côme Chilliet 2025-09-01 10:52:31 +02:00
parent 317044a68b
commit dc49dbc4bb
No known key found for this signature in database
GPG key ID: A3E2F658B28C760A

View file

@ -394,6 +394,7 @@ class OC {
// Do not initialize sessions for 'status.php' requests
// Monitoring endpoints can quickly flood session handlers
// and 'status.php' doesn't require sessions anyway
// We still need to run the ini_set above so that same-site cookies use the correct configuration.
if (str_ends_with($request->getScriptName(), '/status.php')) {
return;
}