From 22160b9d2b4824662a54aad9a5eb4ba6a6a1384b Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?C=C3=B4me=20Chilliet?= Date: Mon, 1 Sep 2025 10:52:31 +0200 Subject: [PATCH] chore: Add comment to make it clear the bail out for status.php should MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit not be moved above ini_set calls. Signed-off-by: Côme Chilliet --- lib/base.php | 1 + 1 file changed, 1 insertion(+) diff --git a/lib/base.php b/lib/base.php index 5a29db1e1d2..9b47ee27c20 100644 --- a/lib/base.php +++ b/lib/base.php @@ -397,6 +397,7 @@ class OC { // Do not initialize sessions for 'status.php' requests // Monitoring endpoints can quickly flood session handlers // and 'status.php' doesn't require sessions anyway + // We still need to run the ini_set above so that same-site cookies use the correct configuration. if (str_ends_with($request->getScriptName(), '/status.php')) { return; }