fix(contact-form): stop depending on the app autoloader in the middleware

suitecrm-form-middleware/audio_captcha.php

@@ -5,7 +5,7 @@
 use Gregwar\Captcha\CaptchaBuilder;
 use Libresign\Espeak\Espeak;
 
-\App\Support\Http\SessionCookie::configureCrossSite();
+require __DIR__ . '/session_bootstrap.php';
 session_start();
 
 header("Access-Control-Allow-Origin: {$_ENV['URL_SITE']}");

suitecrm-form-middleware/captcha.php

@@ -7,7 +7,7 @@
 $builder = new CaptchaBuilder();
 $builder->build();
 
-\App\Support\Http\SessionCookie::configureCrossSite();
+require __DIR__ . '/session_bootstrap.php';
 session_start();
 
 header("Access-Control-Allow-Origin: {$_ENV['URL_SITE']}");

suitecrm-form-middleware/session_bootstrap.php

@@ -0,0 +1,12 @@
+<?php
+
+$isHttps = (!empty($_SERVER['HTTPS']) && strtolower($_SERVER['HTTPS']) !== 'off')
+    || (($_SERVER['HTTP_X_FORWARDED_PROTO'] ?? '') === 'https');
+
+session_set_cookie_params([
+    'lifetime' => 0,
+    'path' => '/',
+    'secure' => $isHttps,
+    'httponly' => true,
+    'samesite' => $isHttps ? 'None' : 'Lax',
+]);

suitecrm-form-middleware/validate.php

@@ -2,7 +2,7 @@
 
 include "../vendor/autoload.php";
 use Gregwar\Captcha\CaptchaBuilder;
-\App\Support\Http\SessionCookie::configureCrossSite();
+require __DIR__ . '/session_bootstrap.php';
 session_start();
 
 header("Access-Control-Allow-Origin: {$_ENV['URL_SITE']}");