question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Samesite cookie warnings in Chrome

See original GitHub issue

Description

I’m getting a warning in the chrome console for each Secure cookie that paypal generates. The message in the chrome console is:

A cookie associated with a cross-site resource at https://www.paypal.com/ was set without the `SameSite` attribute. A future release of Chrome will only deliver cookies with cross-site requests if they are set with `SameSite=None` and `Secure`. You can review cookies in developer tools under Application>Storage>Cookies and see more details at https://www.chromestatus.com/feature/5088147346030592 and https://www.chromestatus.com/feature/5633521622188032.

When looking at the paypal cookies, I can see that they are marked Secure but no SameSite value is specified.

paypal-checkout version 4.0.273

Steps to reproduce

Go to paypal.com with Chrome and look in the console. I was concerned these warnings were something related to my site which is why I looked into it only to find that they are indeed specific to paypal’s cookies.

Affected browsers

Chrome version 77.0.3865.120 64bit Not seeing it in Opera or Firefox

Issue Analytics

  • State:closed
  • Created 4 years ago
  • Reactions:10
  • Comments:19 (4 by maintainers)

github_iconTop GitHub Comments

4reactions
Misiucommented, Dec 4, 2019

Any updates?

3reactions
ghostcommented, Dec 20, 2019

I see the same issue in Firefox and Chrome, but not in Opera

Read more comments on GitHub >

github_iconTop Results From Across the Web

Get Ready for New SameSite=None; Secure Cookie Settings
With Chrome 80 in February, Chrome will treat cookies that have no declared SameSite value as SameSite=Lax cookies. Only cookies with the SameSite=None...
Read more >
Resolving Chrome SameSite cookie warnings and securing ...
You can test that the cookie has been modified by: Press F12 from your browser and go to Application > Cookies 2020-06-19_1206.png; Check...
Read more >
Prepare for SameSite Cookie Updates - Heroku Blog
As previously stated, Google Chrome will stop sending third-party cookies in cross-site requests unless the cookies are secured and flagged ...
Read more >
Tips for testing and debugging SameSite-by-default and ...
Go to chrome://flags and enable (or set to "Default") both #same-site-by-default-cookies and #cookies-without-same-site-must-be-secure. Restart ...
Read more >
This Set-Cookie didn't specify a "SameSite" attribute and was ...
All cookies without a SameSite attribute will be treated as if they had SameSite=Lax specified. In other words, they will be restricted to...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found