Timeline for Do browsers have a defence against CORS from internet to intranet sites?
Current License: CC BY-SA 4.0
6 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Sep 12, 2023 at 21:25 | comment | added | TRiG | I was getting very weird errors from shopping carts after the 3D Secure step, and that fixed it. Have had to do it for a couple of other APIs too, since then. @wizzwizz4. | |
| Sep 12, 2023 at 18:57 | comment | added | wizzwizz4 | @TRiG So that's what that is! Loads of websites do that, but I never quite understood why. | |
| Sep 12, 2023 at 16:59 | comment | added | TRiG | @paj28 My fix for the same issue, rather than setting Lax, was to have a standalone page (not connected to the rest of the CMS, so it doesn't set a new session cookie if it's missing), which just receives the post and get data in a hidden form and posts it on again to the script which actually deals with it. | |
| Sep 11, 2023 at 15:16 | vote | accept | paj28 | ||
| Sep 11, 2023 at 15:16 | comment | added | paj28 | Ah, that'll be it, SameSite defaulting to Lax now. Thanks | |
| Sep 11, 2023 at 15:05 | history | answered | Steffen Ullrich | CC BY-SA 4.0 |