Send Koha-devel mailing list submissions to
koha-devel@lists.koha-community.org
To subscribe or unsubscribe via the World Wide Web, visit
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-devel
or, via email, send a message with subject or body 'help' to
koha-devel-request@lists.koha-community.org
You can reach the person managing the list at
koha-devel-owner@lists.koha-community.org
When replying, please edit your Subject line so it is more specific
than "Re: Contents of Koha-devel digest..."
Today's Topics:
1. Bug 26019 and SameSite cookie attribute (Owen Leonard)
2. Re: Bug 26019 and SameSite cookie attribute
(dcook@prosentient.com.au)
----------------------------------------------------------------------
Message: 1
Date: Sun, 6 Feb 2022 18:49:46 -0500
From: Owen Leonard <oleonard@myacpl.org>
To: Koha Devel <koha-devel@lists.koha-community.org>
Subject: [Koha-devel] Bug 26019 and SameSite cookie attribute
Message-ID:
<CAO4qe2MsdRX2judk1g5jgjEa-g1KSE0FaAmNnv_5S_xL0XC2cA@mail.gmail.com>
Content-Type: text/plain; charset="UTF-8"
There has been some discussion on Bug 26019 about how to handle the
changing ways browsers are handling the "SameSite" attribute in
cookies:
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=26019
There doesn't seem to be a consensus on how to proceed, and I guess
part of the question is whether there should be options for setting an
attribute other than "Lax."
I propose that a logical first step would be to explicitly set
SameSite to "Lax" for the cookies we currently set without a SameSite
attribute, since browsers have been assuming "Lax."
I'd be happy to work on such a patch because I'm tired of seeing the
warnings in the browser console while I'm trying to hunt down jQuery
upgrade issues.
Please weigh in!
Thanks,
Owen
--
Web Developer
Athens County Public Libraries
(740) 737-6006
https://www.myacpl.org
------------------------------
Message: 2
Date: Mon, 7 Feb 2022 12:13:08 +1100
From: <dcook@prosentient.com.au>
To: "'Owen Leonard'" <oleonard@myacpl.org>, "'Koha Devel'"
<koha-devel@lists.koha-community.org>
Subject: Re: [Koha-devel] Bug 26019 and SameSite cookie attribute
Message-ID: <130b01d81bbf$dde1dce0$99a596a0$@prosentient.com.au>
Content-Type: text/plain; charset="utf-8"
Sounds like a logistical first step to me.
David Cook
Senior Software Engineer
Prosentient Systems
Suite 7.03
6a Glen St
Milsons Point NSW 2061
Australia
Office: 02 9212 0899
Online: 02 8005 0595
-----Original Message-----
From: Koha-devel <koha-devel-bounces@lists.koha-community.org> On Behalf Of Owen Leonard
Sent: Monday, 7 February 2022 10:50 AM
To: Koha Devel <koha-devel@lists.koha-community.org>
Subject: [Koha-devel] Bug 26019 and SameSite cookie attribute
There has been some discussion on Bug 26019 about how to handle the changing ways browsers are handling the "SameSite" attribute in
cookies:
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=26019
There doesn't seem to be a consensus on how to proceed, and I guess part of the question is whether there should be options for setting an attribute other than "Lax."
I propose that a logical first step would be to explicitly set SameSite to "Lax" for the cookies we currently set without a SameSite attribute, since browsers have been assuming "Lax."
I'd be happy to work on such a patch because I'm tired of seeing the warnings in the browser console while I'm trying to hunt down jQuery upgrade issues.
Please weigh in!
Thanks,
Owen
--
Web Developer
Athens County Public Libraries
(740) 737-6006
https://www.myacpl.org
_______________________________________________
Koha-devel mailing list
Koha-devel@lists.koha-community.org
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-devel
website : https://www.koha-community.org/ git : https://git.koha-community.org/ bugs : https://bugs.koha-community.org/
------------------------------
Subject: Digest Footer
_______________________________________________
Koha-devel mailing list
Koha-devel@lists.koha-community.org
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-devel
website : https://www.koha-community.org/
git : https://git.koha-community.org/
bugs : https://bugs.koha-community.org/
------------------------------
End of Koha-devel Digest, Vol 195, Issue 3
******************************************