revert(ajax): use 'same-origin' credentials
This reverts commit 80b12ee25c
via PR #42525.
This commit is contained in:
@ -9,7 +9,7 @@ const tokens = new Tokens();
|
|||||||
|
|
||||||
// TODO: test on staging. Do we need 'include' everywhere?
|
// TODO: test on staging. Do we need 'include' everywhere?
|
||||||
const defaultOptions = {
|
const defaultOptions = {
|
||||||
credentials: environment === 'development' ? 'include' : 'same-origin'
|
credentials: environment === 'development' ? 'include' : 'same-site'
|
||||||
};
|
};
|
||||||
|
|
||||||
// _csrf is passed to the client as a cookie. Tokens are sent back to the server
|
// _csrf is passed to the client as a cookie. Tokens are sent back to the server
|
||||||
|
Reference in New Issue
Block a user