[Webkit-unassigned] [Bug 198181] Cookies with SameSite=None or SameSite=invalid treated as Strict

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Apr 14 23:00:28 PDT 2020


https://bugs.webkit.org/show_bug.cgi?id=198181

--- Comment #38 from Jay Shaw <jason at engageify.com> ---
(In reply to Jay Shaw from comment #37)
> (In reply to Nadav Ofir from comment #36)
> > (In reply to Jay Shaw from comment #35)
> > > (In reply to Nadav Ofir from comment #34)
> > > > I used a similar regex in my application, only note that the OS X should be
> > > > expended to `10_1[4-5]` (since it now happens on OSX 10.15
> > > > Allow me to emphasize that, at this moment, I don't have any proof that this
> > > > is due to the Same-Site bug in Safari. that is just my assumption here.
> > > 
> > > there are 2 different targets for osx safari in the regex - the first one
> > > should work. best to just test the regex supplied and then comment.
> > 
> > Jay Shaw - sorry, I didn't notice you added the [0-3] in the former
> > expression.. thanks for that. works as expected now.
> 
> 
> Here's another one with the IPHONE and TOUCH versions updated as well. I
> believe these have also been updated. I'm sure theres a smarter way to do
> this, but anyways works for now.
> 
> <If "%{HTTP_USER_AGENT} !~ /(iPhone; CPU iPhone OS 1[0-3]|iPad; CPU OS
> 1[0-2]|iPod touch; CPU iPhone OS 1[0-3]|Macintosh; Intel Mac OS
> X.*Version\x2F1[0-3].*Safari|Macintosh;.*Mac OS X 10_14.*
> AppleWebKit.*Version\x2F1[0-3].*Safari)/i">
>     Header edit Set-Cookie ^(.*)$ $1;SameSite=None;Secure
> </If>

DOH! I forgot the Ipad version!

<If "%{HTTP_USER_AGENT} !~ /(iPhone; CPU iPhone OS 1[0-3]|iPad; CPU OS 1[0-3]|iPod touch; CPU iPhone OS 1[0-3]|Macintosh; Intel Mac OS X.*Version\x2F1[0-3].*Safari|Macintosh;.*Mac OS X 10_14.* AppleWebKit.*Version\x2F1[0-3].*Safari)/i">
    Header edit Set-Cookie ^(.*)$ $1;SameSite=None;Secure
</If>

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200415/e4f39dff/attachment.htm>


More information about the webkit-unassigned mailing list