From 46cfaab0ad63961e6d918ae5df596814fb344b4e Mon Sep 17 00:00:00 2001
From: =?utf8?q?Paul=20H=C3=A4nsch?= <paul@plutz.net>
Date: Sat, 2 Oct 2021 21:39:39 +0200
Subject: [PATCH] Squashed 'cgilite/' changes from 6bfa64b..af27357

af27357 bugfix tooltips
7459611 improved markup for styling
9451cdd min-height for textarea
84a16dd unambiguous cookie path when destroying user session

git-subtree-dir: cgilite
git-subtree-split: af27357b013bf25c762dabe45733b9402ad581f8
---
 common.css | 4 +++-
 users.sh   | 6 +++---
 2 files changed, 6 insertions(+), 4 deletions(-)

diff --git a/common.css b/common.css
index f9b17ad..71bead6 100644
--- a/common.css
+++ b/common.css
@@ -68,6 +68,7 @@ select, input, button, textarea, a.button {
   border-radius: 2pt;
 }
 select { padding: .375em 0; }
+textarea { min-height: 7em; }
 
 input[type=radio], input[type=checkbox] {
   vertical-align: baseline;
@@ -108,7 +109,8 @@ input + label {
 *[tooltip]:hover:after {
   display: block;
   position: absolute;
-  bottom: -100%; left: 50%; transform: translate(-50%, 0);
+  min-width: 12em;
+  bottom: 100%; left: 50%; transform: translate(-50%, 0);
   content: attr(tooltip);
   padding: .5em;
   color: #000; background-color: #FFC;
diff --git a/users.sh b/users.sh
index 1959e9d..4c730ee 100755
--- a/users.sh
+++ b/users.sh
@@ -226,8 +226,8 @@ user_logout(){
   # destroy cookie, destroy session
   # keep device cookie
   new_session
-  SET_COOKIE 0 session=""
-  SET_COOKIE 0 user_id=""
+  SESSION_COOKIE new
+  SET_COOKIE 0 user_id="" Path="/${_BASE#/}" SameSite=Strict HttpOnly
   REDIRECT "${_BASE}${PATH_INFO}#USER_LOGGED_OUT"
 }
 
@@ -338,7 +338,7 @@ w_user_login(){
   elif [ "$USER_ID" ]; then
     cat <<-EOF
 	[form #user_login .logout method=POST
-	  [p You are currently logged in as "${USER_NAME}"]
+	  [p Logged in as [span . $(HTML ${USER_NAME})]]
 	  [submit "action" "user_logout" Logout]
 	]
 	EOF
-- 
2.39.2