samesite

来源： https://stackoverflow.com/questions/59215475/cakephp-set-cookies-for-samesite-attribute-but-i-cant-find-it-in-the-code-trac

来源： https://stackoverflow.com/questions/63793828/how-to-set-cookie-attribute-samesite-none-for-net-framework-earlier-of-4-7-2

来源： https://stackoverflow.com/questions/63703120/samesite-cookie-header-and-websocket-not-working

来源： https://stackoverflow.com/questions/63703120/samesite-cookie-header-and-websocket-not-working

来源： https://stackoverflow.com/questions/63465924/samesite-cookie-error-on-localhost-with-auth0

问题 I am not able to see SameSite=Strict using builtin developer tools in the “Application” tab. I have added below Header code in Apache configuration Header always edit Set-Cookie (.*) "$1;SameSite=Strict" Header edit Set-Cookie ^(.*)$ $1;SameSite=Strict Please let me know how to set SameSite=Strict using above settings. 回答1: For apache2 >= 2.2.4 Header edit Set-Cookie ^(.*)$ $1;HttpOnly;Secure;SameSite=Strict For apache2 lower than 2.2.4 Header set Set-Cookie HttpOnly;Secure;SameSite=Strict

问题 I am not able to see SameSite=Strict using builtin developer tools in the “Application” tab. I have added below Header code in Apache configuration Header always edit Set-Cookie (.*) "$1;SameSite=Strict" Header edit Set-Cookie ^(.*)$ $1;SameSite=Strict Please let me know how to set SameSite=Strict using above settings. 回答1: For apache2 >= 2.2.4 Header edit Set-Cookie ^(.*)$ $1;HttpOnly;Secure;SameSite=Strict For apache2 lower than 2.2.4 Header set Set-Cookie HttpOnly;Secure;SameSite=Strict

问题 I need some help understanding a case which I can not find described in material I have found describing the new SameSite restrictions for Chrome. Currently, I have a case where I have a site hosted which makes cross-site requests to an API. The API responds with CORS headers. The details are: Site: https://a.a.com API: https://b.a.com --API response headers Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://a.a.com --cookie previously set with Set-Cookie: value

问题 Can anyone tell me what is the difference between SameSite="Lax" and SameSite="Strict" by a nice example as I am a bit confused between these two? 回答1: Lax allows the cookie to be sent on some cross-site requests, whereas Strict never allows the cookie to be sent on a cross-site request. The situations in which Lax cookies can be sent cross-site must satisfy both of the following: The request must be a top-level navigation. You can think of this as equivalent to when the URL shown in the URL

问题 Can anyone tell me what is the difference between SameSite="Lax" and SameSite="Strict" by a nice example as I am a bit confused between these two? 回答1: Lax allows the cookie to be sent on some cross-site requests, whereas Strict never allows the cookie to be sent on a cross-site request. The situations in which Lax cookies can be sent cross-site must satisfy both of the following: The request must be a top-level navigation. You can think of this as equivalent to when the URL shown in the URL