最近搜索


没有最近搜索

Acenerate Support's Avatar

Acenerate Support

已加入2023年1月30日

·

最后活动2023年4月19日

关注

0

关注者

0

活动总数

7

投票

2

订阅

2

活动概览

的最新活动 Acenerate Support

Acenerate Support 进行了评论,

社区评论 Developer - Zendesk Apps Framework (ZAF)

Thank you Zach!  It is simply our authentication cookie; the cookie maintains session for our users within the application.

查看评论 · 已于 2023年2月03日 发布 · Acenerate Support

0

关注者

1

投票

0

评论


Acenerate Support 进行了评论,

社区评论 Developer - Zendesk Apps Framework (ZAF)

Thanks Eric!

查看评论 · 已于 2023年2月02日 发布 · Acenerate Support

0

关注者

1

投票

0

评论


Acenerate Support 创建了一个帖子,

帖子 Developer - Zendesk Apps Framework (ZAF)

Our Zendesk Marketplace application ("Git-Zen") relies on cookies; since Zendesk places the app in an IFRAME, the cookies are designated as third-party.  Most browsers can handle this by allowing our domain in the browser settings; however, Safari (webkit) users do not have this as an option.

Current best practices dictate that document.requestStorageAccess() is used for this purpose (https://developer.mozilla.org/en-US/docs/Web/API/Document/requestStorageAccess); however, in order for this to be used, the "sandbox" attribute of the IFRAME must have the "allow-storage-access-by-user-activation" token included.  This token simply allows the user to decide whether cookies will be permitted for a specific purpose.

Aside from having this token added to the sandbox parameter, there is no other secure way to allow Safari/webkit users to make use of our system without requiring them to allow all third-party cookies, which is obviously something that they should not have to do.

This should be a very simple enhancement to put in place; is this something that is planned to be added, and/or what is the recommended practice for handling this scenario until this can be added (or instead of, if this is not something that Zendesk will add)?

Thank you!

已于 2023年2月02日 发布 · Acenerate Support

1

关注者

7

投票

17

评论