Updated default value for secure session detection

Updated default value for APP_URL so that the startsWith call is not
passed null, since that causes deprecation notice in PHP8.1.
Would show when APP_URL was not set, adding extra confusiion.
This commit is contained in:
Dan Brown 2022-05-11 16:46:59 +01:00
parent 3a8a476906
commit f021823287
No known key found for this signature in database
GPG Key ID: 46D9F943C24A2EF9

View File

@ -72,7 +72,7 @@ return [
// to the server if the browser has a HTTPS connection. This will keep // to the server if the browser has a HTTPS connection. This will keep
// the cookie from being sent to you if it can not be done securely. // the cookie from being sent to you if it can not be done securely.
'secure' => env('SESSION_SECURE_COOKIE', null) 'secure' => env('SESSION_SECURE_COOKIE', null)
?? Str::startsWith(env('APP_URL'), 'https:'), ?? Str::startsWith(env('APP_URL', ''), 'https:'),
// HTTP Access Only // HTTP Access Only
// Setting this value to true will prevent JavaScript from accessing the // Setting this value to true will prevent JavaScript from accessing the