diff --git a/Slim/Http/Cookies.php b/Slim/Http/Cookies.php index c186af0ce..500b6a197 100644 --- a/Slim/Http/Cookies.php +++ b/Slim/Http/Cookies.php @@ -135,7 +135,8 @@ protected function toHeader($name, array $properties) $result .= '; HttpOnly'; } - if (isset($properties['samesite']) && in_array(strtolower($properties['samesite']), ['lax', 'strict'], true)) { + if (isset($properties['samesite']) + && in_array(strtolower($properties['samesite']), ['lax', 'strict', 'none'], true)) { // While strtolower is needed for correct comparison, the RFC doesn't care about case $result .= '; SameSite=' . $properties['samesite']; }