Skip to content

Browser Cookie warning #35

@dvankevich

Description

@dvankevich
  • Cookie “refreshToken” will soon be rejected because it is foreign and does not have the “Partitioned“ attribute.
  • Cookie “sessionId” will soon be rejected because it is foreign and does not have the “Partitioned“ attribute.
  • Some cookies are misusing the recommended “SameSite“ attribute
    • Cookie “sessionId” does not have a proper “SameSite” attribute value. Soon, cookies without the “SameSite” attribute or with an invalid value will be treated as “Lax”. This means that the cookie will no longer be sent in third-party contexts. If your application depends on this cookie being available in such contexts, please add the “SameSite=None“ attribute to it. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite

Metadata

Metadata

Assignees

Labels

No labels
No labels

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions