[erp5_core] Use SameSite=None cookie
The Chrome dev team plans to change the default cookie behaviour by setting the SameSite attribute to Lax.
This will break OfficeJS access for Chrome 80 users, as the cookie will not be send anymore when erp5 would be accessed from the external web site.
In order to keep the current functionalities, one quick solution is too manually set the SameSite value to None.
Of course, doing it would prevent to get all the benefits of the Lax value.
But I believe we would have to finish MR138 to get it.
-
It seems we don't have any other options in the short term.
If we really needed the benefits of lax, it was already possible to change to
SameSite=Laxbefore browsers vendors make this the default (we tried a few months ago and we did not do change for the same officejs compatibility). -
closed
Toggle commit list
-
Please register or sign in to post a comment