/lucee/graph.cfm doesn't need and shouldn't set session cookies

Description

I’m not sure if any functionality under https://github.com/lucee/Lucee/tree/5.3/core/src/main/cfml/context requires session support? the admin has it’s own Application.cfc

Environment

None

Activity

Zac Spitzer 
2 March 2021 at 10:46

Zac Spitzer 
26 February 2021 at 13:53

Andreas R 
3 February 2021 at 18:07

After doing some tests I’ve realized that the tag cform is also creating cookies with embedded context from lucee/formtag-form.cfm :

<cfform action="test.cfm" > <p>Please enter your name: <cfinput type="Text" name="UserName" required="Yes"><p> <input type="Submit" name=""> <input type="RESET"> </cfform>

Also files being generated from /lucee/core/ajax/JSLoader.cfc are creating unwanted cookies. Please see:
https://dev.lucee.org/t/prevent-cookies-cfid-and-cftoken-from-being-set/7905/4



Zac Spitzer 
7 December 2020 at 12:47

Fixed

Details

Assignee

Reporter

Priority

Labels

Fix versions

New Issue warning screen

Before you create a new Issue, please post to the mailing list first https://dev.lucee.org

Once the issue has been verified, one of the Lucee team will ask you to file an issue

Sprint

Affects versions

Created 7 December 2020 at 12:30
Updated 27 April 2022 at 17:05
Resolved 14 April 2021 at 18:12