Search Results

Follow the steps below to remediate this finding on Nginx webserver. Use the proxy_cookie_flags directive (nginx >= 1.19.3):proxy_cookie_flags ~ SameSite=Lax;For older versions, use the lua-nginx-module or configure the application itself to set the correct Sa...

Follow the steps below to remediate this finding on Apache webserver. Ensure mod_headers is enabled:sudo a2enmod headersAdd to your VirtualHost or .htaccess:Header always edit Set-Cookie (.*) "$1; SameSite=Lax"Reload Apache:sudo systemctl reload apache2

Follow the steps below to remediate this finding on Plesk. Log in to the Plesk control panel.Navigate to Domains > your domain > Apache & nginx Settings.Under "Additional Apache directives", add:Header always edit Set-Cookie (.*) "$1; SameSite=Lax"Click Apply.

Follow the steps below to remediate this finding on WordPress. Add the following to wp-config.php to set SameSite=Lax on the WordPress session cookie:@ini_set('session.cookie_samesite', 'Lax');For the auth cookies, add to functions.php:add_filter('set_auth_coo...

Follow the steps below to remediate this finding on Joomla. In your Joomla configuration.php, set:public $cookie_domain = '';For Joomla 4+, edit libraries/src/Application/WebApplication.php or use the session configuration in Global Configuration > System > Se...

Follow the steps below to remediate this finding on Drupal. In settings.php, configure the session cookie:ini_set('session.cookie_samesite', 'Lax');For Drupal 9+, add to settings.php:$settings['session_handler_class'] = '\Drupal\Core\Session\SessionHandler';Sa...

Follow the steps below to remediate this finding on Generic / Developer guidance. Only load JavaScript from origins you control or that you explicitly trust.Audit all <script src="..."> tags and JavaScript includes and replace any unnecessary third-party sourc...

Follow the steps below to remediate this finding on WordPress. Audit scripts enqueued via wp_enqueue_script() and remove or replace third-party CDN sources with self-hosted copies where possible.For remaining CDN scripts, add SRI hashes via the script_loader_t...

Follow the steps below to remediate this finding on Joomla. Audit scripts loaded in your template's index.php and component views.Replace remote CDN references with locally hosted copies where possible.For third-party scripts, add integrity and crossorigin att...