mirror of
https://github.com/wintercms/winter.git
synced 2024-06-28 05:33:29 +02:00
8da798a5cd
This was a contentious change is generally a bad idea to blanket all requests with a dependant cookie. We will try something else. Revert enableXsrfCookies setting. Fixes UX issue introduced where the token expires. This should be replaced by a CSRF policy that determines whether this is needed on the front end.