Nextcloud Host prefix mitigates cookie injection vulnerabilities within potential third-party

Discuss
1

Hi nextcloud Host prefix mitigates cookie, how to fix this?

“The __Host prefix mitigates cookie injection vulnerabilities within potential third-party software sharing the same second level domain. It is an additional hardening on top of ‘normal’ same-site cookies.”

2

Hi,
Your nextcloud must be installed in a subdomain like cloud.example.tld and not in a subfolder like example.tld/nextcloud

3

Yes, i know and i have done that :smile:

4

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.