[naviserver-devel] Cookie Same-Site "None"

[Wolfgang W. <wol...@di...>]

Hello!

We are using "ns_setcookie" with the flag "-samesite". If used with 
"-samesite none", the SameSite value of "None" is not passed to the 
browser. An empty "SameSite" value is different from "SameSite=None", at 
least in Chromium based browsers.

I checked the source code:

https://bitbucket.org/naviserver/naviserver/src/master/nsd/cookies.c

Obviously "none" is treated like an empty value.

Yours,

Wolfgang Winkler

-- 

*Wolfgang Winkler*
Geschäftsführung
wol...@di...
mobil +43.699.19971172

dc:*büro*
digital concepts Novak Winkler OG
Software & Design
Landstraße 68, 5. Stock, 4020 Linz
www.digital-concepts.com <http://www.digital-concepts.com>
tel +43.732.997117.72
tel +43.699.1997117.2

Firmenbuchnummer: 192003h
Firmenbuchgericht: Landesgericht Linz