You are viewing a plain text version of this content. The canonical link for it is here.

Posted to bugs@httpd.apache.org by bu...@apache.org on 2025/03/21 19:00:28 UTC

[Bug 55278] mod_session's cookie may be empty, is repeated twice

https://bz.apache.org/bugzilla/show_bug.cgi?id=55278

Jerzy <ju...@gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Version|2.4.10                      |2.4.62
           Keywords|PatchAvailable              |
                 OS|All                         |Linux

--- Comment #11 from Jerzy <ju...@gmail.com> ---
Hello.

I have tried to set 
    SessionDBDCookieName    session "path=/;secure;SameSite=Strict;"
just to avoid warnings in FireFox Programmers Tools about lack of SameSite
attribute.
The result was fatal - sometimes (not always) I was not able to log in because
of:
    AH00011: ap_cookie: client submitted cookie 'session' more than once
The only form which seems not to cause this problem is:
    SessionDBDCookieName    session path=/

With Best Regards,
    Jerzy

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org