Req #73454 [Opn->Csd]: Add INI session.cookie_samesite
| From: | cmb@php.net | Date: | Wed, 31 Oct 2018 14:02:33 +0000 |
| Subject: | Req #73454 [Opn->Csd]: Add INI session.cookie_samesite | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-217770@lists.php.net to get a copy of this message | ||
Edit report at https://bugs.php.net/bug.php?id=73454&edit=1
ID: 73454
Updated by: cmb@php.net
Reported by: love at sickpeople dot se
Summary: Add INI session.cookie_samesite
-Status: Open
+Status: Closed
Type: Feature/Change Request
Package: Session related
PHP Version: Next Minor Version
-Assigned To:
+Assigned To: cmb
Block user comment: N
Private report: N
New Comment:
The mentioned RFC has been accepted and implemented, so this
ticket can be closed.
Previous Comments:
------------------------------------------------------------------------
[2017-09-14 17:50:23] cmb@php.net
Note that there is already a respective RFC (targetting PHP 7.3.0)
in voting phase: <https://wiki.php.net/rfc/same-site-cookie>.
------------------------------------------------------------------------
[2016-11-03 16:04:18] love at sickpeople dot se
Description:
------------
Add an INI for configuring the SameSite flag on cookies set by Session.
See also https://bugs.php.net/bug.php?id=72230
for adding this flag to setcookie().
Update to RFC 6265 regarding SameSite (draft): https://tools.ietf.org/html/draft-ietf-httpbis-cookie-same-site-00
SameSite is currently supported by Chrome and Opera: http://caniuse.com/#feat=same-site-cookie-attribute
------------------------------------------------------------------------
--
Edit this bug report at https://bugs.php.net/bug.php?id=73454&edit=1