Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add SameSite attribute support #269

Merged
merged 4 commits into from
Oct 28, 2019
Merged

Add SameSite attribute support #269

merged 4 commits into from
Oct 28, 2019

Conversation

Exelord
Copy link
Contributor

@Exelord Exelord commented May 27, 2019

There is a new cookie attribute called SameSite that we may want to support as well.

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie#Directives

`SameSite=Strict`
`SameSite=Lax` (Optional)
Allows servers to assert that a cookie ought not to be sent along with cross-site requests, which provides some protection against cross-site request forgery attacks (CSRF).

Exelord added a commit to Exelord/ember-simple-auth that referenced this pull request May 27, 2019
@marcoow
Copy link
Member

marcoow commented May 31, 2019

Makes sense 👍 Can you add test cases (see test cases for the other options)?

@Exelord
Copy link
Contributor Author

Exelord commented Jun 20, 2019

Done :)

@marcoow
Copy link
Member

marcoow commented Jun 24, 2019

Nice 👍 That only adds the test for the FastBoot case though - can you add one for when the same code runs in the browser as well? See https://github.com/simplabs/ember-cookies/blob/c516386620f605774626681fbf48c43b2074c757/tests/unit/services/cookies-test.js#L87

@marcoow marcoow merged commit e5e8e66 into mainmatter:master Oct 28, 2019
@Exelord Exelord deleted the patch-1 branch October 29, 2019 11:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants