614
0%

Ran 13 Oct 2020 08:19PM UTC

Jobs 3

Files 58

Run time 28s

Badge

Embed ▾

pending completion

Build # 614

Build Type

push

travis-ci

Committed by

web-flow

Commit Message

TNL-7608 - Add Note about ``ngrok`` usage. (#111)

As stated by @giovannicimolin:

  Due to a recent change in `Chrome`_ and `Firefox`_
  and the way they handle cookies, it’s not possible
  to access cookies marked as ``SameSite=None`` if
  they are not also Secure.

  This is to help avoid a few CSRF attacks.

  Secure cookies are only available when the request
  is done through `HTTPS`_, which is not the case on
  the devstack.

The workaround for this behaviour is to set
``DCS_SESSION_COOKIE_SAMESITE`` from ``'Lax'``
to ``None`` in the studio container's ``devstack.py``,
when using tools such as ``ngrok``.

This commit adds a note about this to the ``README.rst``
of the repository.

.. _Chrome:: https://twitter.com/ChromiumDev/status/1293236234932846596
.. _Firefox:: https://hacks.mozilla.org/2020/08/changes-to-samesite-cookie-behavior/
.. See ``Secure`` Attribute as a reference
.. _HTTPS:: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie

Run Details

2868 of 2902 relevant lines covered (98.83%)

1.92 hits per line

Jobs

ID	Job ID	Ran	Coverage
1	614.1 (GH_TOKEN=[secure])	13 Oct 2020 08:19PM UTC	98.79	Travis Job 614.1
2	614.2 (GH_TOKEN=[secure])	13 Oct 2020 08:19PM UTC	98.83	Travis Job 614.2
3	614.3 (GH_TOKEN=[secure])	13 Oct 2020 08:19PM UTC	0.0	Travis Job 614.3

Source Files on build 614

Detailed source file information is not available for this build.

edx / xblock-lti-consumer / 614
0%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 614

edx / xblock-lti-consumer / 614 0%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 614

edx / xblock-lti-consumer / 614
0%

README BADGES
x