Page MenuHomePhabricator

'<wiki-id>wmE-sessionTickLastTick*' cookies not setting samesite attribute
Open, Needs TriagePublic

Description

Screenshot 2023-07-25 at 12.45.25.png (71×2 px, 65 KB)

Cookie “mediawikiwikiwmE-sessionTickLastTickTime” does not have a proper “SameSite” attribute value. Soon, cookies without the “SameSite” attribute or with an invalid value will be treated as “Lax”. This means that the cookie will no longer be sent in third-party contexts. If your application depends on this cookie being available in such contexts, please add the “SameSite=None“ attribute to it. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite
Cookie “mediawikiwikiwmE-sessionTickTickCount” does not have a proper “SameSite” attribute value. Soon, cookies without the “SameSite” attribute or with an invalid value will be treated as “Lax”. This means that the cookie will no longer be sent in third-party contexts. If your application depends on this cookie being available in such contexts, please add the “SameSite=None“ attribute to it. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite

See also:

Event Timeline

Tgr renamed this task from Cookies not setting samesite attribute to '<wiki-id>wmE-sessionTickLastTick*' cookies not setting samesite attribute.Jan 9 2024, 8:44 PM

sessionTickLastTick is for unique device counts, right? Preventing those cookies on cross-site requests that aren't top-level navigation (which is the behavior with no SameSite attribute set) actually seems like a good thing there.