proposal: net/http: add check for SameSite client incompatibility #36539
Comments
Change https://golang.org/cl/214600 mentions this issue: |
Since this is very user-agent-specific, I'm not sure that net/http is the best place for this to leave (based off the CL). An external library or maybe x/net might suit this feature better. /cc @bradfitz |
It is, true. However because it can potentially deal with writing cookies,
thought the code needed to be in the core.
…On Mon, Jan 13, 2020, 5:07 PM Akhil Indurti ***@***.***> wrote:
Since this is very user-agent-specific, I'm not sure that net/http is the
best place for this to leave (based off the CL). An external library or
maybe x/net might suit this feature better. /cc @bradfitz
<https://github.com/bradfitz>
—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
<#36539?email_source=notifications&email_token=AABUP6GGENHS7AHEYLY4R53Q5UF4RA5CNFSM4KGJ2LV2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEI24NKA#issuecomment-573949608>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AABUP6AGGHUFHXJLE7WCCCTQ5UF4RANCNFSM4KGJ2LVQ>
.
|
Sorry, we don't want to go down the road of adding user agent sniffing APIs to the standard library. That's a huge maintenance burden, somewhat frail, and arguably not good for the web. This can live elsewhere, of course. (https://golang.org/doc/faq#x_in_std) |
Also: https://groups.google.com/a/chromium.org/forum/m/#!msg/blink-dev/-2JIRNMWJ7s/yHe4tQNLCgAJ ("Intent to Deprecate and Freeze: The User-Agent string") |
Thanks
…On Tue, Jan 14, 2020, 8:32 AM Brad Fitzpatrick ***@***.***> wrote:
Also:
https://groups.google.com/a/chromium.org/forum/m/#!msg/blink-dev/-2JIRNMWJ7s/yHe4tQNLCgAJ
("Intent to Deprecate and Freeze: The User-Agent string")
—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
<#36539?email_source=notifications&email_token=AABUP6BBL4WV6NSMDSK7UADQ5XSI5A5CNFSM4KGJ2LV2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEI5IGBA#issuecomment-574259972>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AABUP6FPFKN3522YWYE5VDLQ5XSI5ANCNFSM4KGJ2LVQ>
.
|
I'm looking to implement a helper method based on the SameSite known incompatible clients.
https://www.chromium.org/updates/same-site/incompatible-clients
The text was updated successfully, but these errors were encountered: