New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Chrome 80+的第三方 cookie 变动 #159

Open

lovelmh13 opened this issue Jul 26, 2021 · 0 comments

Owner

lovelmh13 commented Jul 26, 2021

在 80+ 版本的 Chrome 中，cookie 的 SameSite 默认为 Lax。会影响 . 不同的第三方网站携带 cookie。

关于 SameSite ，相关信息在 Chrome 80 後針對第三方 Cookie 的規則調整 (default SameSite=Lax) 讲解的很详细

解决方法
设置 SameSite = None
网站可以选择显式关闭 SameSite 属性，将其设为 None。不过，前提是必须同时设置 Secure 属性（Cookie 只能通过 HTTPS 协议发送），否则无效

直接修改浏览器配置 chrome://flags/，找到 SameSite by default cookies 和 Cookies without SameSite must be secure，设置为 Disable

反向代理，当浏览器版本不支持 SameSite = None 的时候，可以有效

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment