You can programmatically override this attribute within the CSP page classes. (The default for system web applications and new or upgraded user applications.) Strict - The application does not send cookies with cross-site requests. Lax - The application sends cookies with safe, top-level cross-site navigation.

If SameSite has a value of None, browsers may require applications to use HTTPS connections. None - The application sends cookies with cross-site requests. The SameSite attribute determines how an application handles cookies in relation to third-party applications (aka cross-site requests).

General Settings for a CSP-Based Web Applicationįor a CSP-based web application, specify values in the initial section of the General tab as follows:Ĭontrols the default value of the SameSite attribute for application-specific cookies. (For background, see Components of a CSP-Based Web Application.) To configure a CSP-based web application:įollow the instructions in Create and Edit Applications to display the application definition (creating it first if needed).įor the General tab, use the information below to define the web application.įor the other parts of the application definition, see Create and Edit Applications.Įnsure that the Web Gateway configuration is also updated to provide access to this web application. This page primarily discusses the settings that are specific to CSP-based applications. You can use the same Management Portal pages (and the same APIs) to configure CSP-based web applications as you do for other applications. How the CSP Server Handles Static Files.

Download app builder 2023.1