Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SameSite Cookie Policy #6

Merged
merged 2 commits into from
Apr 1, 2021
Merged

SameSite Cookie Policy #6

merged 2 commits into from
Apr 1, 2021

Conversation

svandragt
Copy link

@svandragt svandragt commented Mar 30, 2021

Fixes #5 by setting SameSite policy to None with secured cookie.

Cookies with SameSite=None must now also specify the Secure attribute (they require a secure context/HTTPS).
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie/SameSite

Note: PR must be changed to master before merging.

Base automatically changed from 3-aws-as-composer to master March 30, 2021 15:32
@svandragt svandragt linked an issue Mar 30, 2021 that may be closed by this pull request
@svandragt
Copy link
Author

Travis build failing is a known issue #7

Copy link

@goldenapples goldenapples left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good, and today I learned about the new array value argument in setcookie.

I'd suggest targeting this PR upstream, but it looks like they're still supporting older versions of PHP. It might be nice as a courtesy to at least open an issue in the upstream repository to let them know about the issue though.

Copy link
Member

@mattheu mattheu left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks fine

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Same Site Cookie Policy
4 participants