session ID getting changed with using flash in jsp
Hi,
I have a jsp page where I am embedding shockwave flash as an object to enable voice recording from browser and upload to my tomcat server. I am using the WAMI recorder and using the API to call startRecording and stopRecording. When stopRecodring gets executed, the JSESSIONID cookie value gets changed and I see this message in the browser console (chrome) :
Indicate whether to send a cookie in a cross-site request by specifying its SameSite attribute.
- Specify SameSite=None and Secure if the cookie should be sent in cross-site requests. This enables third-party use.
The version of tomcat I am using (8.0.47) does not support the samesite attribute and there's only solutions suggested for tomcat 8.5 and above. Any suggestions on how to fix this issue?
(We are working on migrating this entire solution to a different technology but it could take a while and we need to support flash until then)
