0
votes

When 3th party cookies are disabled in the browser, pages loaded into iframe have disabled cookies. When ASP MVC application resource is loaded in parent (main) window and the same application is loaded in iframe, later one doesn't send session cookies and so doesn't share session with top level page.

My first idea to solve this is to provide SessionID as parameter in the iframe url, and somehow based on that SessionID load existing Session State of top page. Is it possible?

1

1 Answers

0
votes

ASP.Net already have cookieless Session option. You just need to turn on in web.config.

<sessionState cookieless="true" />

I have used the cookieless option in the passed in ASP.Net Web Form. I haven't really tested in ASP.Net MVC.