Merge branch '3.4' into 4.4

* 3.4: [Http Foundation] Fix clear cookie samesite [Security] Check if firewall is stateless before checking for session/previous session [Form] Support customized intl php.ini settings [Security] Remember me: allow to set the samesite cookie flag [Debug] fix for PHP 7.3.16+/7.4.4+ [Validator] Backport translations Prevent warning in proc_open()

Author: nicolas-grekas

RememberMe/AbstractRememberMeServices.php

@@ -39,6 +39,7 @@ abstract class AbstractRememberMeServices implements RememberMeServicesInterface
  protected $options = [
  'secure' => false,
  'httponly' => true,
+ 'samesite' => null,
  ];
  private $providerKey;
  private $secret;
@@ -276,7 +277,7 @@ protected function cancelCookie(Request $request)
  $this->logger->debug('Clearing remember-me cookie.', ['name' => $this->options['name']]);
  }
 
- $request->attributes->set(self::COOKIE_ATTR_NAME, new Cookie($this->options['name'], null, 1, $this->options['path'], $this->options['domain'], $this->options['secure'] ?? $request->isSecure(), $this->options['httponly'], false, $this->options['samesite'] ?? null));
+ $request->attributes->set(self::COOKIE_ATTR_NAME, new Cookie($this->options['name'], null, 1, $this->options['path'], $this->options['domain'], $this->options['secure'] ?? $request->isSecure(), $this->options['httponly'], false, $this->options['samesite']));
  }
 
  /**

RememberMe/PersistentTokenBasedRememberMeServices.php

@@ -86,7 +86,7 @@ protected function processAutoLoginCookie(array $cookieParts, Request $request)
  $this->options['secure'] ?? $request->isSecure(),
  $this->options['httponly'],
  false,
- $this->options['samesite'] ?? null
+ $this->options['samesite']
  )
  );
 
@@ -121,7 +121,7 @@ protected function onLoginSuccess(Request $request, Response $response, TokenInt
  $this->options['secure'] ?? $request->isSecure(),
  $this->options['httponly'],
  false,
- $this->options['samesite'] ?? null
+ $this->options['samesite']
  )
  );
  }

RememberMe/TokenBasedRememberMeServices.php

@@ -83,7 +83,7 @@ protected function onLoginSuccess(Request $request, Response $response, TokenInt
  $this->options['secure'] ?? $request->isSecure(),
  $this->options['httponly'],
  false,
- $this->options['samesite'] ?? null
+ $this->options['samesite']
  )
  );
  }