Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Please add support of the "SameSite=None" too, not only the "Lax" and "Strict" #23

Open
Serrin opened this issue Oct 11, 2019 · 3 comments

Comments

@Serrin
Copy link

Serrin commented Oct 11, 2019

This will be optional in Chrome.

"Cookies marked SameSite=None should also be marked Secure."
https://www.chromestatus.com/feature/5088147346030592

@Serrin Serrin changed the title Please add the "SameSite=None" value too, not only the "Lax" and "Strict" Please add support of the "SameSite=None" too, not only the "Lax" and "Strict" Oct 11, 2019
@madmurphy
Copy link
Owner

Thank you, Serrin. But I think it's too early. The feature is still experimental and browsers' behavior is likely going to change. However I will keep an eye on this feature.

--madmurphy

@Serrin
Copy link
Author

Serrin commented Nov 2, 2019

Thank you!

@Shalelol
Copy link

Shalelol commented Jan 24, 2020

If you begin work on this. Please pay attention to the backwards compatibility advice provided by chromium here: https://www.chromium.org/updates/same-site/incompatible-clients

I spent some typing this up as I'll need to use this soon. Please note at this point in time this is completely untested: https://gist.github.com/Shalelol/be2a1d1024c4858e8356047677e40b64

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants