+1 Thanks, Owen! On 07.02.22 00:49, Owen Leonard wrote:
There has been some discussion on Bug 26019 about how to handle the changing ways browsers are handling the "SameSite" attribute in cookies:
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=26019
There doesn't seem to be a consensus on how to proceed, and I guess part of the question is whether there should be options for setting an attribute other than "Lax."
I propose that a logical first step would be to explicitly set SameSite to "Lax" for the cookies we currently set without a SameSite attribute, since browsers have been assuming "Lax."
I'd be happy to work on such a patch because I'm tired of seeing the warnings in the browser console while I'm trying to hunt down jQuery upgrade issues.
Please weigh in!
Thanks,
Owen