Disabled samesite value for now for avoiding cookies not being removed on iframe-load

This commit is contained in:
Kasper Rynning-Tønnesen
2018-09-23 21:48:25 +02:00
parent ced5e52223
commit eb379e6f5c

View File

@@ -123,7 +123,7 @@ app.use(function (req, res, next) {
maxAge: 365 * 10000 * 3600000,
httpOnly: true,
secure: secure,
sameSite: true,
//sameSite: true,
});
} else {
//process.stderr.write((new Date), "couldn't fetch cookie for some reason, maybe no cookie exists?", req, "couldn't fetch cookie for some reason, maybe no cookie exists?");
@@ -131,7 +131,7 @@ app.use(function (req, res, next) {
maxAge: 365 * 10000 * 3600000,
httpOnly: true,
secure: secure,
sameSite: true,
//sameSite: true,
});
}
res.header("Access-Control-Allow-Origin", "*");