Skip to content

Delete invalid cookies on invalid requests

Jamie Tanna requested to merge feature/delete-invalid-cookies into develop

On the case that an invalid cookie is sent (be that malice or accident) we should unset the cookie, so it can't be reused.

This has the added bonus of making it a nicer UX in the case it's an accident, especially if i.e. using mobile where it's not as straightforward to clear cookies.

Merge request reports