mirror of
https://github.com/discourse/discourse.git
synced 2025-02-25 18:55:32 -06:00
When opening authentication popup, start with an on-site URL. Opening "about:blank", and then POSTing the form does not send same-site=Lax cookies. Opening the popup to a page on the site domain, and then POSTing the form, works successfully.