8d0a6b2674
no issue - browsers now block cross-origin cookies unless they are explicitly set with `SameSite=none` and `Secure=true` options which was preventing the login request made by Ghost-Admin from working - added an explicit `SameSite=none` option to the private site session cookie - will only work when the front-end site is served over HTTPS - there's no way to get browsers to accept cross-origin cookies over HTTP |
||
---|---|---|
.. | ||
apps | ||
helpers | ||
meta | ||
services | ||
views |