Browse Source

set SameSiteMode.None for the antiforgery token cookie

pull/5741/head
Halil İbrahim Kalkan 6 years ago
parent
commit
9aec4f3ce3
  1. 1
      framework/src/Volo.Abp.AspNetCore.Mvc/Volo/Abp/AspNetCore/Mvc/AntiForgery/AbpAntiForgeryOptions.cs

1
framework/src/Volo.Abp.AspNetCore.Mvc/Volo/Abp/AspNetCore/Mvc/AntiForgery/AbpAntiForgeryOptions.cs

@ -57,6 +57,7 @@ namespace Volo.Abp.AspNetCore.Mvc.AntiForgery
Name = "XSRF-TOKEN",
HttpOnly = false,
IsEssential = true,
SameSite = SameSiteMode.None,
Expiration = TimeSpan.FromDays(3650) //10 years!
};

Loading…
Cancel
Save