Req #72230 [Com]: Add SameSite Cookies to setcookie()

Edit report at https://bugs.php.net/bug.php?id=72230&edit=1 ID: 72230 Comment by: love at sickpeople dot se Reported by: love at sickpeople dot se Summary: Add SameSite Cookies to setcookie() Status: Open Type: Feature/Change Request Package: Unknown/Other Function PHP Version: Irrelevant Block user comment: N Private report: N New Comment: Bug for adding INI session.cookie_samesite: https://bugs.php.net/bug.php?id=73454 Previous Comments: ------------------------------------------------------------------------ [2016-10-04 13:22:50] marcus at synchromedia dot co dot uk true isn't a good option - it should accept only the defined values from the RFC (https://tools.ietf.org/html/draft-west-first-party-cookies-07#section-3.1), i.e. Strict or Lax. ------------------------------------------------------------------------ [2016-05-17 11:29:56] love at sickpeople dot se Description: ------------ Add a new parameter to setcookie() - Name: samesite - Default value: false - If true, sets the SameSite flag In short, this helps security by protecting against CSRF, XSSI and others (see link below). Update to RFC 6265: https://tools.ietf.org/html/draft-west-first-party-cookies-07 Implemented in Chrome: https://bugs.chromium.org/p/chromium/issues/detail?id=459154 ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=72230&edit=1