From: Paul Hänsch <paul@plutz.net>
Date: Sat, 2 Oct 2021 19:39:39 +0000 (+0200)
Subject: Merge commit '46cfaab0ad63961e6d918ae5df596814fb344b4e'
X-Git-Url: http://git.plutz.net/?p=serve0;a=commitdiff_plain;h=db0868f2e033589fcc6e61ae84cce7d4e3766933;hp=-c

Merge commit '46cfaab0ad63961e6d918ae5df596814fb344b4e'
---

db0868f2e033589fcc6e61ae84cce7d4e3766933
diff --combined cgilite/common.css
index f9b17ad,71bead6..71bead6
--- a/cgilite/common.css
+++ b/cgilite/common.css
@@@ -68,6 -68,7 +68,7 @@@ select, input, button, textarea, a.butt
    border-radius: 2pt;
  }
  select { padding: .375em 0; }
+ textarea { min-height: 7em; }
  
  input[type=radio], input[type=checkbox] {
    vertical-align: baseline;
@@@ -108,7 -109,8 +109,8 @@@ input + label 
  *[tooltip]:hover:after {
    display: block;
    position: absolute;
-   bottom: -100%; left: 50%; transform: translate(-50%, 0);
+   min-width: 12em;
+   bottom: 100%; left: 50%; transform: translate(-50%, 0);
    content: attr(tooltip);
    padding: .5em;
    color: #000; background-color: #FFC;
diff --combined cgilite/users.sh
index 1959e9d,4c730ee..4c730ee
--- a/cgilite/users.sh
+++ b/cgilite/users.sh
@@@ -226,8 -226,8 +226,8 @@@ user_logout()
    # destroy cookie, destroy session
    # keep device cookie
    new_session
-   SET_COOKIE 0 session=""
-   SET_COOKIE 0 user_id=""
+   SESSION_COOKIE new
+   SET_COOKIE 0 user_id="" Path="/${_BASE#/}" SameSite=Strict HttpOnly
    REDIRECT "${_BASE}${PATH_INFO}#USER_LOGGED_OUT"
  }
  
@@@ -338,7 -338,7 +338,7 @@@ w_user_login()
    elif [ "$USER_ID" ]; then
      cat <<-EOF
  	[form #user_login .logout method=POST
- 	  [p You are currently logged in as "${USER_NAME}"]
+ 	  [p Logged in as [span . $(HTML ${USER_NAME})]]
  	  [submit "action" "user_logout" Logout]
  	]
  	EOF