From dc49dbc4bb3a4ed0894c9f98ebb683f38819d378 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?C=C3=B4me=20Chilliet?= Date: Mon, 1 Sep 2025 10:52:31 +0200 Subject: [PATCH] chore: Add comment to make it clear the bail out for status.php should MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit not be moved above ini_set calls. Signed-off-by: Côme Chilliet --- lib/base.php | 1 + 1 file changed, 1 insertion(+) diff --git a/lib/base.php b/lib/base.php index 7b2867b7d68..474209c1a1d 100644 --- a/lib/base.php +++ b/lib/base.php @@ -394,6 +394,7 @@ class OC { // Do not initialize sessions for 'status.php' requests // Monitoring endpoints can quickly flood session handlers // and 'status.php' doesn't require sessions anyway + // We still need to run the ini_set above so that same-site cookies use the correct configuration. if (str_ends_with($request->getScriptName(), '/status.php')) { return; }