Samesite cookie warnings in Chrome
See original GitHub issueDescription
I’m getting a warning in the chrome console for each Secure cookie that paypal generates. The message in the chrome console is:
A cookie associated with a cross-site resource at https://www.paypal.com/ was set without the `SameSite` attribute. A future release of Chrome will only deliver cookies with cross-site requests if they are set with `SameSite=None` and `Secure`. You can review cookies in developer tools under Application>Storage>Cookies and see more details at https://www.chromestatus.com/feature/5088147346030592 and https://www.chromestatus.com/feature/5633521622188032.
When looking at the paypal cookies, I can see that they are marked Secure but no SameSite value is specified.
paypal-checkout version 4.0.273
Steps to reproduce
Go to paypal.com with Chrome and look in the console. I was concerned these warnings were something related to my site which is why I looked into it only to find that they are indeed specific to paypal’s cookies.
Affected browsers
Chrome version 77.0.3865.120 64bit Not seeing it in Opera or Firefox
Issue Analytics
- State:
- Created 4 years ago
- Reactions:10
- Comments:19 (4 by maintainers)
Top Results From Across the Web
Get Ready for New SameSite=None; Secure Cookie Settings
With Chrome 80 in February, Chrome will treat cookies that have no declared SameSite value as SameSite=Lax cookies. Only cookies with the SameSite=None...
Read more >Resolving Chrome SameSite cookie warnings and securing ...
You can test that the cookie has been modified by: Press F12 from your browser and go to Application > Cookies 2020-06-19_1206.png; Check...
Read more >Prepare for SameSite Cookie Updates - Heroku Blog
As previously stated, Google Chrome will stop sending third-party cookies in cross-site requests unless the cookies are secured and flagged ...
Read more >Tips for testing and debugging SameSite-by-default and ...
Go to chrome://flags and enable (or set to "Default") both #same-site-by-default-cookies and #cookies-without-same-site-must-be-secure. Restart ...
Read more >This Set-Cookie didn't specify a "SameSite" attribute and was ...
All cookies without a SameSite attribute will be treated as if they had SameSite=Lax specified. In other words, they will be restricted to...
Read more >
Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free
Top Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Any updates?
I see the same issue in Firefox and Chrome, but not in Opera