🔐 Secure #session defaults: session.use_strict_mode=1, session.cookie_httponly=1 and session.cookie_samesite=Lax. This can break #SSO flows like #SAML POST bindings, payment callbacks and shared sessi…
@michabbb@social.vivaldi.net