removed samesite check using cookie (BC break)

Author: dg

src/Bridges/HttpDI/HttpExtension.php

@@ -41,7 +41,7 @@ public function getConfigSchema(): Nette\Schema\Schema
 			'cookiePath' => Expect::string()->dynamic(),
 			'cookieDomain' => Expect::string()->dynamic(),
 			'cookieSecure' => Expect::anyOf('auto', null, true, false)->firstIsDefault()->dynamic(), // Whether the cookie is available only through HTTPS
-			'disableNetteCookie' => Expect::bool(false), // disables cookie use by Nette
+			'disableNetteCookie' => Expect::bool(false)->deprecated(),
 		]);
 	}
 
@@ -140,13 +140,6 @@ private function sendHeaders(): void
 				$this->initialization->addBody('$response->setHeader(?, ?);', [$key, $value]);
 			}
 		}
-
-		if (!$config->disableNetteCookie) {
-			$this->initialization->addBody(
-				'Nette\Http\Helpers::initCookie($this->getService(?), $response);',
-				[$this->prefix('request')],
-			);
-		}
 	}
 
 

src/Http/Helpers.php

@@ -21,9 +21,6 @@ final class Helpers
 {
 	use Nette\StaticClass;
 
-	/** @internal */
-	public const StrictCookieName = '_nss';
-
 
 	/**
 	 * Returns HTTP valid date format.
@@ -51,10 +48,4 @@ public static function ipMatch(string $ip, string $mask): bool
 
 		return strncmp($ip, $mask, $size === '' ? $max : (int) $size) === 0;
 	}
-
-
-	public static function initCookie(IRequest $request, IResponse $response): void
-	{
-		$response->setCookie(self::StrictCookieName, '1', 0, '/', sameSite: IResponse::SameSiteStrict);
-	}
 }

src/Http/IRequest.php

@@ -13,7 +13,6 @@
 /**
  * HTTP request provides access scheme for request sent via HTTP.
  * @method ?UrlImmutable getReferer() Returns referrer.
- * @method bool isSameSite() Is the request sent from the same origin?
  * @method bool isFrom(string|list<string>|null $site = null, string|list<string>|null $initiator = null)
  */
 interface IRequest

src/Http/Request.php

@@ -232,13 +232,6 @@ public function isSecured(): bool
 	}
 
 
-	/** @deprecated use isFrom(['same-site', 'same-origin']) */
-	public function isSameSite(): bool
-	{
-		return isset($this->cookies[Helpers::StrictCookieName]);
-	}
-
-
 	/**
 	 * Checks whether Sec-Fetch headers match the expected values.
 	 * @param string|list<string>|null  $site