Merge pull request #11878 from nextcloud/no-require-same-site-cookie-on-assets

Don't require Same Site Cookies on assets

apps/theming/lib/Controller/ThemingController.php

@@ -397,6 +397,7 @@ class ThemingController extends Controller {
 	/**
 	 * @NoCSRFRequired
 	 * @PublicPage
+	 * @NoSameSiteCookieRequired
 	 *
 	 * @return FileDisplayResponse|NotFoundResponse
 	 * @throws NotPermittedException
@@ -428,6 +429,7 @@ class ThemingController extends Controller {
 	/**
 	 * @NoCSRFRequired
 	 * @PublicPage
+	 * @NoSameSiteCookieRequired
 	 *
 	 * @return DataDownloadResponse
 	 */

core/Controller/CssController.php

@@ -62,6 +62,7 @@ class CssController extends Controller {
 	/**
 	 * @PublicPage
 	 * @NoCSRFRequired
+	 * @NoSameSiteCookieRequired
 	 *
 	 * @param string $fileName css filename with extension
 	 * @param string $appName css folder name

core/Controller/JsController.php

@@ -56,6 +56,7 @@ class JsController extends Controller {
 	/**
 	 * @PublicPage
 	 * @NoCSRFRequired
+	 * @NoSameSiteCookieRequired
 	 *
 	 * @param string $fileName js filename with extension
 	 * @param string $appName js folder name

core/Controller/SvgController.php

@@ -57,6 +57,7 @@ class SvgController extends Controller {
 	/**
 	 * @PublicPage
 	 * @NoCSRFRequired
+	 * @NoSameSiteCookieRequired
 	 *
 	 * Generate svg from filename with the requested color
 	 *
@@ -73,6 +74,7 @@ class SvgController extends Controller {
 	/**
 	 * @PublicPage
 	 * @NoCSRFRequired
+	 * @NoSameSiteCookieRequired
 	 *
 	 * Generate svg from filename with the requested color
 	 *