Merge pull request #698 from pierotofy/corsfix

Make CORS settings relaxed again (broken due to Django 2.1 update)

requirements.txt

@@ -10,7 +10,7 @@ django-appconf==1.0.2
 django-codemirror2==0.2
 django-colorfield==0.1.15
 django-compressor==2.2
-django-cors-headers==2.2.0
+django-cors-headers==3.0.2
 django-filter==2.0.0
 django-guardian==1.4.9
 django-imagekit==4.0.1

webodm/settings.py

@@ -250,6 +250,7 @@ LOGIN_URL = '/login/'
 # CORS (very relaxed settings, users might want to change this in production)
 CORS_ORIGIN_ALLOW_ALL = True
 CORS_ALLOW_CREDENTIALS = True
+SESSION_COOKIE_SAMESITE = None
 
 # File uploads
 MEDIA_ROOT = os.path.join(BASE_DIR, 'app', 'media')