[SOLVED] SameSite attribute on cookies
How Do I?
4 years ago
Firefox, probably others are complaining of:
Cookie ‘exp_last_visit’ will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite
Is there a way to set this within EE as I cannot find any reference to it.
Thanks!
4 years ago
yes. this was a config override that was recently added: https://docs.expressionengine.com/latest/general/system-configuration-overrides.html#cookie_samesite
4 years ago
Ah thanks!
$config['cookie_samesite'] = 'Srict';Small typo in your example.
4 years ago
Would there be a reason that a form fails with ” This form has expired. Please refresh and try again.” when cookie_secure is set to y?