Re: [RFC] Add SameSite cookie attribute parameter
| From: | Nicolas Grekas | Date: | Sun, 15 Jan 2023 16:40:46 +0000 |
| Subject: | Re: [RFC] Add SameSite cookie attribute parameter | ||
| References: | 1 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-119269@lists.php.net to get a copy of this message | ||
Hi George,
Hello Internals,
>
> I would like to start the discussion about the Add SameSite cookie
> attribute parameter RFC:
> https://wiki.php.net/rfc/same-site-parameter
>
> This proposes to add an optional same site parameter to the setrawcooki(),
> setcookie() and session_set_cookie_params() that takes a a value a new
> SameSite enum:
>
> enum SameSite {
> case None;
> case Lax;
> case Strict;}
>
There's quite some activity on the HTTP cookies side.
I read about SameParty and Partitioned attributes recently, see:
- https://developer.chrome.com/docs/privacy-sandbox/chips/
- https://github.com/cfredric/sameparty
Maybe we should have a plan that works for these too?
Nicolas