diff options
| -rw-r--r-- | lib/base.php | 7 |
1 files changed, 4 insertions, 3 deletions
diff --git a/lib/base.php b/lib/base.php index f6b4f5555eb..d0672785cef 100644 --- a/lib/base.php +++ b/lib/base.php @@ -412,6 +412,10 @@ class OC { } public static function initSession() { + if(self::$server->getRequest()->getServerProtocol() === 'https') { + ini_set('session.cookie_secure', true); + } + // prevents javascript from accessing php session cookies ini_set('session.cookie_httponly', true); @@ -663,9 +667,6 @@ class OC { self::checkInstalled(); OC_Response::addSecurityHeaders(); - if(self::$server->getRequest()->getServerProtocol() === 'https') { - ini_set('session.cookie_secure', true); - } self::performSameSiteCookieProtection(); |