[wp-trac] [WordPress Trac] #37000: Support for the SameSite cookie attribute

WordPress Trac noreply at wordpress.org
Fri Apr 10 07:12:27 UTC 2020


#37000: Support for the SameSite cookie attribute
-------------------------------------------------+-------------------------
 Reporter:  johnbillion                          |       Owner:  (none)
     Type:  enhancement                          |      Status:  new
 Priority:  normal                               |   Milestone:  Future
                                                 |  Release
Component:  Security                             |     Version:
 Severity:  normal                               |  Resolution:
 Keywords:  has-patch dev-feedback needs-        |     Focuses:
  refresh needs-dev-note                         |  administration
-------------------------------------------------+-------------------------

Comment (by ayeshrajans):

 I have released v1.4 of the plugin https://wordpress.org/plugins/samesite/
 , that supports configurable `SameSite` values. You can add the following
 to `wp-config.php` file to override the browser-default (what browsers
 assume when SameSite flag is not set) and php.ini default:

 `define( 'WP_SAMESITE_COOKIE', 'Lax' );`

 Change "Lax" to "None" if you want to forcefully disable Chrome 80+
 behavior of automatically assuming SameSite=Lax on its A/B test users.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/37000#comment:26>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list