[Koha-bugs] [Bug 33597] Get rid of few SameSite warnings

bugzilla-daemon at bugs.koha-community.org bugzilla-daemon at bugs.koha-community.org
Fri Apr 28 20:43:13 CEST 2023


https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=33597

--- Comment #7 from Nick Clemens <nick at bywatersolutions.com> ---
Created attachment 150414
  -->
https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=150414&action=edit
Bug 33597: Fix deleting cookie for holdfor(club)

Resolve:
Cookie “holdfor” does not have a proper “SameSite” attribute value. Soon,
cookies without the “SameSite” attribute or with an invalid value will be
treated as “Lax”. This means that the cookie will no longer be sent in
third-party contexts. If your application depends on this cookie being
available in such contexts, please add the “SameSite=None“ attribute to it.

Did not see warning for holdforclub. But since it is created with Lax, we
should remove it with Lax.

Test plan:
Similar to previous patch. Check console on logout page.

Signed-off-by: Marcel de Rooy <m.de.rooy at rijksmuseum.nl>
Signed-off-by: Nick Clemens <nick at bywatersolutions.com>

-- 
You are receiving this mail because:
You are watching all bug changes.


More information about the Koha-bugs mailing list