-
Suggestion
-
Resolution: Unresolved
-
None
-
5
-
Problem definition
In attempt to mitigate the effect of implementing SameSite cookie control in Chrome browser v80, changes were done to Issue Collector in scope of this bug ticket: JRASERVER-70494.
One resulting effect of fixing the same was dropped XSRF check, which has a consequence that the session of a logged in user is not matched to the Reporter field after reporting issue via Issue Collector.
Instead, the user gets presented with a reporter email address field that will be used to match the Reporter of the issue. This makes the Issue Collector feedback a bit less efficient to collect the feedback for already logged-in users.
Suggested resolution
Bring back the user-session matching functionality to the Issue Collector in Jira.
- is caused by
-
JRASERVER-70494 Issue Collectors won't work for clients using Chrome 80 which enables new samesite cookie controls
- Closed
- is related to
-
JRASERVER-70471 Implement SameSite policy support
- Gathering Interest
- relates to
-
JSWSERVER-21530 Feedback form not loading when logged out of JAC
- Gathering Impact