Ghost/core/frontend/apps/private-blogging
Kevin Ansfield 8d0a6b2674 🐛 Fixed "View site" not logging into private sites with separate admin domains
no issue

- browsers now block cross-origin cookies unless they are explicitly set with `SameSite=none` and `Secure=true` options which was preventing the login request made by Ghost-Admin from working
- added an explicit `SameSite=none` option to the private site session cookie
- will only work when the front-end site is served over HTTPS - there's no way to get browsers to accept cross-origin cookies over HTTP
2020-04-15 10:52:30 +01:00
..
lib 🐛 Fixed "View site" not logging into private sites with separate admin domains 2020-04-15 10:52:30 +01:00
index.js Extracted frontend folder (#10780) 2019-06-19 11:30:28 +02:00
robots.txt Extracted frontend folder (#10780) 2019-06-19 11:30:28 +02:00