Bug 1456529 - Support SameSite attribute on session cookies

diff --git a/Bugzilla/CGI.pm b/Bugzilla/CGI.pm
index 6e48a2355a377359a1530bc9e18fa0a11ff67273..9e8ba6c09b22cf4434292864f5f8f77a104c1420 100644 (file)
--- a/Bugzilla/CGI.pm
+++ b/Bugzilla/CGI.pm
@@ -687,6 +687,8 @@ sub send_cookie {
     $paramhash{'-secure'} = 1
       if lc( $uri->scheme ) eq 'https';
 
+    $paramhash{'-samesite'} = 'Lax';
+
     push(@{$self->{'Bugzilla_cookie_list'}}, $self->cookie(%paramhash));
 }
 

diff --git a/Makefile.PL b/Makefile.PL
index 4cea5b066509d7182dfa305560cb7738276792d4..96e340b4f77e45b75c48190c89f23c25515a4148 100755 (executable)
--- a/Makefile.PL
+++ b/Makefile.PL
@@ -34,7 +34,7 @@ BEGIN {
 # PREREQ_PM
 my %requires = (
     'Algorithm::BloomFilter'   => '0.02',
-    'CGI'                      => '3.51',
+    'CGI'                      => '4.31',
     'CPAN::Meta::Prereqs'      => '2.132830',
     'CPAN::Meta::Requirements' => '2.121',
     'Class::XSAccessor'        => '1.18',