Document cookieSameSite=lax

[r3h6]

Searched quite a while to find the reason why the login didn't work:
[BE][cookieSameSite] = lax
This should be documented in the extension documentation.

[dmitryd]

Well, see here: https://typo3.org/security/advisory/typo3-core-sa-2021-014

[garbast]

Without the setting lax, this extension can not function. @dmitryd do you expect this to be undocumented only to obfuscate the problem?

[dmitryd]

@garbast People are supposed to read security advisories :) This is what I mean :)

[garbast]

It's fine to read the advisory AND to document the configuration, that is needed to make this extension work.

An advisory does not override indivitual decisions. If you use TYPO3 12 with mindful CSPs the setting lax pose a fare less big problem.