3pp-mirror/penpot
1
0
Fork 0
mirror of https://github.com/penpot/penpot.git synced 2025-05-16 23:16:12 +02:00
Code Issues Projects Releases Packages Wiki Activity

🐛 Fix unexpected default cookies behavior on redirectiong to penpot.

Browse source 
The SameSite=Strict on chrome behaves differently than in Firefox and
makes the top-level url redirect not sending cookies if the user is
redirected from other page to penpot. The SameSite=Lax fixes the issue.
This commit is contained in:
Andrey Antukh 2022-01-11 11:54:11 +01:00 • committed by Alonso Torres
parent f74569506e
commit 2feb22d3bd
2 changed files with 2 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

1
CHANGES.md
View file

@ -42,6 +42,7 @@
- Improved behaviour on text options when not text is selected [Taiga #2390](https://tree.taiga.io/project/penpot/issue/2390) - Improved behaviour on text options when not text is selected [Taiga #2390](https://tree.taiga.io/project/penpot/issue/2390)
- Fix decimal numbers in export viewbox [Taiga #2290](https://tree.taiga.io/project/penpot/issue/2290) - Fix decimal numbers in export viewbox [Taiga #2290](https://tree.taiga.io/project/penpot/issue/2290)
- Right click over artboard name to open its menu [Taiga #1679](https://tree.taiga.io/project/penpot/issue/1679) - Right click over artboard name to open its menu [Taiga #1679](https://tree.taiga.io/project/penpot/issue/1679)
- Make the default session cookue use SameSite=Lax instead of Strict (causes some issues in latest versions of Chrome).
### :arrow_up: Deps updates ### :arrow_up: Deps updates

4
backend/src/app/http/session.clj
View file

@ -58,9 +58,7 @@
(assoc response :cookies {cookie-name {:path "/" (assoc response :cookies {cookie-name {:path "/"
:http-only true :http-only true
:value id :value id
:same-site (cond (not secure?) :lax :same-site (if cors? :none :lax)
cors? :none
:else :strict)
:secure secure?}}))) :secure secure?}})))
(defn- clear-cookies (defn- clear-cookies