Skip to content

Conversation

@rullzer
Copy link
Member

@rullzer rullzer commented Oct 22, 2019

Since we don't set the referer header by default now the redirect window
always showed.
This is now moved to the strict cookie check which is only send if you
come from the same domain.

Basically this means:

  1. If you enter the url in your addressbar manually => pass
  2. If you get redirected from some other site => 💥
  3. If you get redirected from the mail => should apss (please double check)

Copy link
Member

@ChristophWurst ChristophWurst left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Tested & works!

rullzer and others added 2 commits October 23, 2019 10:01
Since we don't set the referer header by default now the redirect window
always showed.
This is now moved to the strict cookie check which is only send if you
come from the same domain.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants