mirror of
https://github.com/discourse/discourse.git
synced 2025-02-12 22:34:57 +00:00
310a8ac242
When opening authentication popup, start with an on-site URL. Opening "about:blank", and then POSTing the form does not send same-site=Lax cookies. Opening the popup to a page on the site domain, and then POSTing the form, works successfully.