[Webkit-unassigned] [Bug 212261] New: Cookie SameSite option ignored if expires exceeds 7 days

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Fri May 22 05:46:56 PDT 2020


https://bugs.webkit.org/show_bug.cgi?id=212261

            Bug ID: 212261
           Summary: Cookie SameSite option ignored if expires exceeds 7
                    days
           Product: WebKit
           Version: Safari 13
          Hardware: Unspecified
                OS: macOS 10.15
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: New Bugs
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: alexander.osin at outlook.com

Hello Webkit,


If I set cookie with 'expires' option set to 7 days from now, 'SameSite' option appears to be set as 'Strict'.

document.cookie = "test1=value;expires="+new Date(Date.now() + (7 * 24 * 60 * 60 * 1000)).toGMTString()+';secure;SameSite=Strict;';


If I set 'expires' option to something far from 7 days limit, 'SameSite' option appears as '---', despite it's being provided.

document.cookie = "test2=value;expires="+new Date(Date.now() + (365 * 24 * 60 * 60 * 1000)).toGMTString()+';secure;SameSite=Strict;';


Thank you,
Alexander

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200522/1ad873bc/attachment.htm>


More information about the webkit-unassigned mailing list