[wp-trac] [WordPress Trac] #48183: Chrome SameSite Cookies - Investigate what could possible go wrong

[WordPress Trac]

#48183: Chrome SameSite Cookies - Investigate what could possible go wrong
------------------------------------+-----------------------------
 Reporter:  danielkanchev           |      Owner:  (none)
     Type:  defect (bug)            |     Status:  new
 Priority:  normal                  |  Milestone:  Awaiting Review
Component:  Login and Registration  |    Version:  5.2.3
 Severity:  major                   |   Keywords:  needs-testing
  Focuses:  multisite               |
------------------------------------+-----------------------------
 This is more an awareness ticket and not a bug. Still, I consider this to
 be very important for core, plugins devs and themes devs, as well as
 integrations which rely on cookies.

 With Chrome 80 a SameSite attribute is introduced. It will be set to
 SameSite=Lax by default unless devs of sites set it to Strict or None.
 Details here:

 https://www.chromestatus.com/feature/5088147346030592
 https://web.dev/samesite-cookies-explained

 It is important to:

 1. Check if this affects WordPress core - single and multi-site.
 2. Properly communicate this with plugins/themes devs.

 Feel free to edit this ticket in case it is not in the correct category,
 etc.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/48183>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform