Open
Bug 1461634
Opened 7 years ago
Updated 4 years ago
Support SameSite cookie attribute
Categories
(Conduit :: Phabricator, enhancement, P3)
Conduit
Phabricator
Tracking
(Not tracked)
NEW
People
(Reporter: psiinon, Unassigned)
References
Details
(Keywords: conduit-triaged, sec-low, wsec-cookie, Whiteboard: [secops:2021])
Firefox 60 introduces support for the SameSite cookie attribute: https://blog.mozilla.org/security/2018/04/24/same-site-cookies-in-firefox-60/
This provides significant protection against CSRF vulnerabilities and so it should be applied to any session cookies.
Are phsid and phcid both used as session cookies? They are both flagged as secure and httponly.
|
||
Updated•7 years ago
|
Keywords: conduit-triaged
|
||
Updated•4 years ago
|
Whiteboard: [secops:2021]
You need to log in
before you can comment on or make changes to this bug.
Description
•