diff --git a/snappymail/v/0.0.0/app/libraries/snappymail/http/secfetch.php b/snappymail/v/0.0.0/app/libraries/snappymail/http/secfetch.php index 7be575984..406ffc2a9 100644 --- a/snappymail/v/0.0.0/app/libraries/snappymail/http/secfetch.php +++ b/snappymail/v/0.0.0/app/libraries/snappymail/http/secfetch.php @@ -107,8 +107,11 @@ abstract class SecFetch public static function isSameOrigin() : bool { + return !isset($_SERVER['HTTP_SEC_FETCH_SITE']) - || 'same-origin' === $_SERVER['HTTP_SEC_FETCH_SITE']; + || 'same-origin' === $_SERVER['HTTP_SEC_FETCH_SITE'] + // Fulguris incognito: Dest = document, Mode = navigate, Site = none, User = true + || 'none' === $_SERVER['HTTP_SEC_FETCH_SITE']; } }