CCCHH/oci-images
Watch
1
1
Fork
You've already forked oci-images
 0
Code Issues 1 Pull requests 2 Packages 9 Activity Actions

nextcloud: build oci-images with php strict_mode enabled
All checks were successful
Build Nextcloud / Build Nextcloud 34 Image (push) Successful in 7m7s
Details

Browse source
This commit is contained in:
chris 2026-10-21 20:31:49 +02:00
commit 146ca74b84
Signed by: c6ristian
SSH key fingerprint: SHA256:B3m+yzpaxGXSEcDBpPHfvza/DNC0wuX+CKMeGq8wgak
2 changed files with 11 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

9
nextcloud/99-security-hardening.ini Normal file
View file

@ -0,0 +1,9 @@
; Whether to use strict session mode.
; Strict session mode does not accept an uninitialized session ID, and
; regenerates the session ID if the browser sends an uninitialized session ID.
; Strict mode protects applications from session fixation via a session adoption
; vulnerability. It is disabled by default for maximum compatibility, but
; enabling it is encouraged.
; https://wiki.php.net/rfc/strict_sessions
session.use_strict_mode = 1