mirror of
https://github.com/discourse/discourse.git
synced 2025-02-26 05:32:08 +08:00

When opening authentication popup, start with an on-site URL. Opening "about:blank", and then POSTing the form does not send same-site=Lax cookies. Opening the popup to a page on the site domain, and then POSTing the form, works successfully.