8da798a5cd
This was a contentious change is generally a bad idea to blanket all requests with a dependant cookie. We will try something else. Revert enableXsrfCookies setting. Fixes UX issue introduced where the token expires. This should be replaced by a CSRF policy that determines whether this is needed on the front end. |
||
|---|---|---|
| .. | ||
| backend | ||
| cms | ||
| system | ||