Jj's web stream

In order to make an iframe's request send the domain's cookies. I had to set my cookies to SameSite=none and make sure that my cookies are Secure. Spent the last 2hrs learning that #webdev #http

Glad I had read Mozilla's announcement last month, so I could guess it may be something related to this when my site stopped working.

https://hacks.mozilla.org/2020/08/changes-to-samesite-cookie-behavior/

Shared on:

Reactions

Liran Tal | 👋 see you at #SnykCon Oct 21-22

ahh indeed. I'm just writing on that. it's a good thing you went through it since having the `secure` flag is something you should've enabled prior so now you're on a good path.
2020-10-04T18:19:13+00:00
Liran Tal | 👋 see you at #SnykCon Oct 21-22

Totally understand you
2020-10-04T22:36:27+00:00
Jj

I could only "figure it out" because I had previously read Mozilla's post to think it could be that. There were 0 hints anywhere of how to debug this. Without prior outside knowledge it's impossible to deduce.
2020-10-04T22:22:03+00:00

Reply or react to this post via Webmentions or reply or like to the Mastodon, Twitter or Instagram post.