From d63de5471bf3c8a40bdc9f9e3b5332d2f0b1f2a9 Mon Sep 17 00:00:00 2001 From: Thomas Citharel Date: Wed, 17 Oct 2018 09:24:21 +0200 Subject: Don't require Same Site Cookies on assets Which can be used for public iframe embeeding See https://github.com/nextcloud/calendar/issues/169 Signed-off-by: Thomas Citharel --- apps/theming/lib/Controller/ThemingController.php | 2 ++ 1 file changed, 2 insertions(+) (limited to 'apps/theming/lib') diff --git a/apps/theming/lib/Controller/ThemingController.php b/apps/theming/lib/Controller/ThemingController.php index a1fa5e57836..cc8af2cae3e 100644 --- a/apps/theming/lib/Controller/ThemingController.php +++ b/apps/theming/lib/Controller/ThemingController.php @@ -397,6 +397,7 @@ class ThemingController extends Controller { /** * @NoCSRFRequired * @PublicPage + * @NoSameSiteCookieRequired * * @return FileDisplayResponse|NotFoundResponse * @throws NotPermittedException @@ -428,6 +429,7 @@ class ThemingController extends Controller { /** * @NoCSRFRequired * @PublicPage + * @NoSameSiteCookieRequired * * @return DataDownloadResponse */ -- cgit v1.2.3