https://bz.apache.org/bugzilla/show_bug.cgi?id=63947
Bug ID: 63947
Summary: Rfc6265CookieProcessor won't output SameSite=None
Product: Tomcat 9
Version: 9.0.27
Hardware: PC
OS: Mac OS X 10.1
Status: NEW
Severity: normal
Priority: P2
Component: Util
Assignee: dev@tomcat.apache.org
Reporter: matthew.buck...@ctl.ox.ac.uk
Target Milestone: -----
With the upcoming change to Google Chrome will mean that any cookie without a
SameSite=None attribute will be treated as though it has SameSite=Lax
(https://www.chromestatus.com/feature/5088147346030592). Currently the
Rfc6265CookieProcessor doesn't allow you to output a SameSite=None attribute as
when you try the cookie processor ignores it as previously not outputting the
values was equivalent.
Could we allow the Rfc6265CookieProcessor to output SameSite=None so that I can
use this to revert the behaviour of Chrome to sending Cookies on cross domain
requests?
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
