Skip to content
GitLab

Draft: fix: set cookie samesite to None

Closed Arnaud Vergnet requested to merge topic/default/cookie-fix into branch/default

Needed when the cubicweb instance is not on the same server as react admin.

More research is needed to find the most secure fix.

See https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie/SameSite.

Edited by Arnaud Vergnet