Skip to content

Commit

Permalink
Remove Path=/ requirement (#49)
Browse files Browse the repository at this point in the history
  • Loading branch information
DCtheTall committed Aug 11, 2022
1 parent 80022d8 commit 5f5bf84
Showing 1 changed file with 4 additions and 4 deletions.
8 changes: 4 additions & 4 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -44,7 +44,7 @@ For more information about the design of the Origin-Trial, see the [documentatio
- [Third-party customer support widgets](#third-party-customer-support-widgets)
- [CDN load balancing](#cdn-load-balancing)
- [How to enforce design principles](#how-to-enforce-design-principles)
- [`Secure` and `Path` attributes](#secure-and-path-attributes)
- [`Secure` attribute](#secure-attributes)
- [`HttpOnly` attribute](#httponly-attribute)
- [`SameSite` attribute](#samesite-attribute)
- [Limit the number of cookies a third party can use in a single partition](#limit-the-number-of-cookies-a-third-party-can-use-in-a-single-partition)
Expand Down Expand Up @@ -332,7 +332,7 @@ These steps could be added to [section 5.4 of RFC6265bis](https://datatracker.ie

1. If the cookie-attribute-list contains an attribute with an attribute-name of "PartitionKey" and the attribute-value is null, then skip the following steps and insert the cookie into the cookie store.

1. 1. If the cookie-attribute-list does not contain an attribute with an attribute-name of `Secure` and an attribute with an attribute-name of `Path` and attribute-value of `/` then abort these steps and ignore the cookie entirely.
1. If the cookie-attribute-list does not contain an attribute with an attribute-name of `Secure` then abort these steps and ignore the cookie entirely.

1. Set the cookie's partition-key to the attribute-value of the element in the attribute-list whose attribute-name is "PartitionKey".

Expand Down Expand Up @@ -418,9 +418,9 @@ When the browser navigates to another top-level site, then subsequent requests t

### How to enforce design principles

#### `Secure` and `Path` attributes
#### `Secure` attribute

User agent must reject any cookie set with `Partitioned` that does not also include the `Secure` and `Path=/`.
User agent must reject any cookie set with `Partitioned` that does not also include the `Secure`.

#### `HttpOnly` attribute

Expand Down

0 comments on commit 5f5bf84

Please sign in to comment.