proposal: net/http: add check for SameSite client incompatibility

[jeffdupont]

I'm looking to implement a helper method based on the SameSite known incompatible clients.

https://www.chromium.org/updates/same-site/incompatible-clients

[gopherbot]

Change https://golang.org/cl/214600 mentions this issue: http: add support to determine if client supports the SameSite cookie parameter

[smasher164]

Since this is very user-agent-specific, I'm not sure that net/http is the best place for this to leave (based off the CL). An external library or maybe x/net might suit this feature better. /cc @bradfitz

[jeffdupont]

It is, true. However because it can potentially deal with writing cookies, thought the code needed to be in the core.

…

On Mon, Jan 13, 2020, 5:07 PM Akhil Indurti ***@***.***> wrote: Since this is very user-agent-specific, I'm not sure that net/http is the best place for this to leave (based off the CL). An external library or maybe x/net might suit this feature better. /cc @bradfitz <https://github.com/bradfitz> — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#36539?email_source=notifications&email_token=AABUP6GGENHS7AHEYLY4R53Q5UF4RA5CNFSM4KGJ2LV2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEI24NKA#issuecomment-573949608>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AABUP6AGGHUFHXJLE7WCCCTQ5UF4RANCNFSM4KGJ2LVQ> .

[bradfitz]

Sorry, we don't want to go down the road of adding user agent sniffing APIs to the standard library. That's a huge maintenance burden, somewhat frail, and arguably not good for the web.

This can live elsewhere, of course. (https://golang.org/doc/faq#x_in_std)

[bradfitz]

Also: https://groups.google.com/a/chromium.org/forum/m/#!msg/blink-dev/-2JIRNMWJ7s/yHe4tQNLCgAJ ("Intent to Deprecate and Freeze: The User-Agent string")

[jeffdupont]

Thanks

…

On Tue, Jan 14, 2020, 8:32 AM Brad Fitzpatrick ***@***.***> wrote: Also: https://groups.google.com/a/chromium.org/forum/m/#!msg/blink-dev/-2JIRNMWJ7s/yHe4tQNLCgAJ ("Intent to Deprecate and Freeze: The User-Agent string") — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#36539?email_source=notifications&email_token=AABUP6BBL4WV6NSMDSK7UADQ5XSI5A5CNFSM4KGJ2LV2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEI5IGBA#issuecomment-574259972>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AABUP6FPFKN3522YWYE5VDLQ5XSI5ANCNFSM4KGJ2LVQ> .