I have a problem with a Magento2 installation.
If I am logged in as a client on a browser, with another browser (client not logged in). If I do the same actions on both browsers, the second browser (on which I was not connected) takes the first session ....
I Try this solution : Suddenly started using another logged in user's session - Magento 2
But It doesn't work
SID is disabled
I have the problem that the cache is enabled or disabled
And I still have the problem if session are stored on files or on db
After some modifications, it seems that the session is no longer "stolen". By cons there is always a problem in the display. For example with my logged session I go to https://example.com/customer/account/ as well as with my unlogged session at the same time: on the unlogged session I see the information of the other session.
I'm thinking of a cache problem, but by completely disabling the cache :
php bin/magento cache:disable
the problem persists
someone would have an idea of the origin of the problem?
It seem's that is a server issue, on my chrome console I've got this message :
Error parsing header X-XSS-Protection: 1; mode=block, 1; mode=block: expected semicolon at character position 13. The default protections will be applied.