[Webkit-unassigned] [Bug 198181] Cookies with SameSite=None or SameSite=invalid treated as Strict

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Apr 14 22:59:30 PDT 2020


https://bugs.webkit.org/show_bug.cgi?id=198181

--- Comment #37 from Jay Shaw <jason at engageify.com> ---
(In reply to Nadav Ofir from comment #36)
> (In reply to Jay Shaw from comment #35)
> > (In reply to Nadav Ofir from comment #34)
> > > I used a similar regex in my application, only note that the OS X should be
> > > expended to `10_1[4-5]` (since it now happens on OSX 10.15
> > > Allow me to emphasize that, at this moment, I don't have any proof that this
> > > is due to the Same-Site bug in Safari. that is just my assumption here.
> > 
> > there are 2 different targets for osx safari in the regex - the first one
> > should work. best to just test the regex supplied and then comment.
> 
> Jay Shaw - sorry, I didn't notice you added the [0-3] in the former
> expression.. thanks for that. works as expected now.


Here's another one with the IPHONE and TOUCH versions updated as well. I believe these have also been updated. I'm sure theres a smarter way to do this, but anyways works for now.

<If "%{HTTP_USER_AGENT} !~ /(iPhone; CPU iPhone OS 1[0-3]|iPad; CPU OS 1[0-2]|iPod touch; CPU iPhone OS 1[0-3]|Macintosh; Intel Mac OS X.*Version\x2F1[0-3].*Safari|Macintosh;.*Mac OS X 10_14.* AppleWebKit.*Version\x2F1[0-3].*Safari)/i">
    Header edit Set-Cookie ^(.*)$ $1;SameSite=None;Secure
</If>

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200415/440608ad/attachment.htm>


More information about the webkit-unassigned mailing list