mirror of
https://github.com/TryGhost/Ghost.git
synced 2024-12-22 18:31:57 +03:00
8d0a6b2674
no issue - browsers now block cross-origin cookies unless they are explicitly set with `SameSite=none` and `Secure=true` options which was preventing the login request made by Ghost-Admin from working - added an explicit `SameSite=none` option to the private site session cookie - will only work when the front-end site is served over HTTPS - there's no way to get browsers to accept cross-origin cookies over HTTP |
||
---|---|---|
.. | ||
lib | ||
index.js | ||
robots.txt |