Merge branch '6179-improve-session-security' into 'develop'

Resolve "Improve session security"

Closes #6179

See merge request !1488

interface/lib/app.inc.php

@@ -126,6 +126,9 @@ class app {
 				array($this->session, 'destroy'),
 				array($this->session, 'gc'));
 
+			ini_set('session.cookie_httponly', true);
+			@ini_set('session.cookie_samesite', 'Lax');
+
 			session_start();
 
 			//* Initialize session variables