← all change records
Not yet reviewed. Contrib-impact data below may be incomplete.

#3250913 Drupal 7 no longer strips leading www. from cookie domain by default because that leaks session cookies to subdomains

released Target 7.x
#2522002

Generated 2026-05-12 08:43 UTC

No contrib projects currently use either side of this change.