In
https://www.drupal.org/project/cacheable_csrf/issues/2789019 →
we added support for cacheable_cookie_handling.
In
https://www.drupal.org/project/cacheable_cookie_handling/issues/3217157 →
we're adding a separate storage for cacheable_cookie_handling's data, using sessionStorage instead of cookies.
cacheable_csrf is not compatible with this storage, and breaks if its cookie is deleted.
Apply all patches, and test an Ajax call: `cacheable_csrf_validate()` will fail because `cacheable_csrf_get_cookie()` will return an empty value (because the cookie was deleted by cacheable_cookie_handling)
I updated cacheable_cookie_handling's side to support a special value to ask it not to store the value in the sessionStorage (but keep on using cookies). This issue is to add support for this in cacheable_csrf.
Review and testing.
None.
Nothing on cacheable_csrf's side.
None.
Needs review
1.0
Code
Not all content is available!
It's likely this issue predates Contrib.social: some issue and comment data are missing.