Skip to content

v0.16.1

Choose a tag to compare

View all tags
@mvanhorn mvanhorn released this 17 Jun 15:14
· 6 commits to main since this release
v0.16.1
289a5f9
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's Changed

Fixes GitHub (and other host-bound) logins in the cmux browser lane. __Host--prefixed cookies (such as GitHub's __Host-user_session_same_site) were being delivered with a Domain attribute, which WebKit hard-rejects, so the session cookie silently failed to land and the cmux agent browser stayed logged out despite a successful sync.

cmux now scopes __Host- and host-only cookies by url with no Domain (and forces Secure + Path / for __Host-), matching the CDP and livecdp lanes. Also downgrades insecure SameSite=None cookies to Lax for parity.

Full Changelog: v0.16.0...v0.16.1

Assets 3
Loading