From 70cdbdd65cd29fd356b116a7bf25c8b0dcda2dce Mon Sep 17 00:00:00 2001 From: Nick Mispoulier Date: Wed, 17 Apr 2024 12:26:42 +0200 Subject: [PATCH] Fixes #6134 --- system/core/Security.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/system/core/Security.php b/system/core/Security.php index e7772e03def..2640c6f2b6e 100644 --- a/system/core/Security.php +++ b/system/core/Security.php @@ -294,7 +294,7 @@ public function csrf_set_cookie() header('Set-Cookie: '.$this->_csrf_cookie_name.'='.$this->_csrf_hash .'; Expires='.gmdate('D, d-M-Y H:i:s T', $expire) .'; Max-Age='.$this->_csrf_expire - .'; Path='.rawurlencode(config_item('cookie_path')) + .'; Path='.implode('/', array_map('rawurlencode', explode('/', config_item('cookie_path')))) .($domain === '' ? '' : '; Domain='.$domain) .($secure_cookie ? '; Secure' : '') .(config_item('cookie_httponly') ? '; HttpOnly' : '')