Set CookieFlags for SameSite to avoid "Some cookies are reusing the recommended SameSite attribute"

Created on 27 February 2022, almost 3 years ago
Updated 10 May 2024, 8 months ago

Problem/Motivation

After installing the module and visiting a page on Firefox:

Cookie “_ga_W9HMTY9G88” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite
Cookie “_ga” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite

Steps to reproduce

1. Install the module.
2. Configure settings.
3. Visit a page using Firefox.

Proposed resolution

Here's a Stack Overflow answer describing one possible solution.

🐛 Bug report
Status

Needs review

Version

4.0

Component

Code

Created by

🇯🇵Japan ptmkenny

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Merge Requests

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

Production build 0.71.5 2024