On Wed, May 12, 2021 4:04 am, Paul Lesniewski wrote: > > > On Tue, May 11, 2021 5:14 pm, James B. Byrne wrote: >> I have stumbled across these which appear to me to be related to the >> issue >> I >> brought to your attention: >> >> https://hacks.mozilla.org/2020/08/changes-to-samesite-cookie-behavior/ >> >> https://bugzilla.mozilla.org/show_bug.cgi?id=1617609 > > Thanks, but as I said, you saw an *advisory warning* in the console and it > should not have had anything to do with the problem. But if it is for > some reason causing an issue, there is a change in SVN now that should > eliminate any concerns about SameSite. > >> I have added our SM web address to the >> 'network.cookie.sameSite.laxByDefault.disabledHosts' setting in FF. I >> will >> report if the logouts continue or not following this change. > > The warning seems to be pointing out the opposite, where what you want is > Lax but it is currently using None (and thinks the cookies don't have the > Secure flag). There's a few issues with this that I pointed out > previously and again, the change I made in SVN should bypass the whole > conversation. Snapshot tarballs with that change are available on our > downloads page. > > So if your change for some reason helps the problem, that'd be great to > know, but it may not change what we need to do (or have already done) on > our end. Also as previously suggested, please indicate what you see on screen and where -- is the folder list showing a "you must be logged in" error? What happens if you right-click that frame and select H and then R? -- Paul Lesniewski SquirrelMail Team Please support Open Source Software by donating to SquirrelMail! http://squirrelmail.org/donate_paul_lesniewski.php ----- squirrelmail-users mailing list Posting guidelines: http://squirrelmail.org/postingguidelines List address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx List archives: http://news.gmane.org/gmane.mail.squirrelmail.user List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
