mirror of
https://github.com/scottlamb/moonfire-nvr.git
synced 2025-01-14 08:15:01 -05:00
3c1163dfe2
I initially chose SameSite=Lax because I thought if a user followed a link to the landing page, the landing page's ajax requests wouldn't send the cookie. But I just did an experiment, and that's not true. Only the initial page load (of a .html file) lacks the cookie. All of its resources and ajax requests send the cookie. I'm not sure about document.cookie accesses, but my cookie is HttpOnly anyway, so it's irrelevant. So no reason to be lax. |
||
|---|---|---|
| .. | ||
| testdata | ||
| upgrade | ||
| auth.rs | ||
| Cargo.toml | ||
| check.rs | ||
| coding.rs | ||
| db.rs | ||
| dir.rs | ||
| lib.rs | ||
| raw.rs | ||
| recording.rs | ||
| schema.proto | ||
| schema.rs | ||
| schema.sql | ||
| testutil.rs | ||
| writer.rs | ||