1620334 - Need MDN landing page that SameSite console warnings can reference

Status: RESOLVED FIXED

(Core :: Networking: Cookies, enhancement, P5)

Description

[Mike Conca [:mconca]]

We will be logging upcoming changes to the SameSite cookie default behavior in the console. We should have an MDN landing page that the console can direct web developers to that explains the changes and what developers should do about them:

• Cookies without a SameSite attribute will be treated as SameSite=Lax.
• Cookies with SameSite=None must also specify Secure, meaning they require a secure context.

Comment 1

[Mike Conca [:mconca]]

Chris, not sure if the devrel-needed keyword is active these days, but wanted to put this on your radar.

Comment 2

[Chris Mills [:cmills]]

Thanks :mconca! Docs work for this is being tracked at https://github.com/mdn/sprints/issues/2152; I'll follow up with you further about it over mail.

Comment 3

[Florian Scholz (Open Web Docs)]

I've started a page here https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie/SameSite
We can expand it further if needed. Does that work for you, :mconca?

Comment 4

[Mike Conca [:mconca]]

(In reply to Florian Scholz [:fscholz] (MDN) from comment #3)

I've started a page here https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie/SameSite
We can expand it further if needed. Does that work for you, :mconca?

This looks great. Thanks!

Comment 5

[Andrea Marchesini [:baku]]

Attachment: Bug 1620334 - Update sameSite MDN URL, r?ckerschb

Comment 6

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/c7f7fd752961
Update sameSite MDN URL, r=fscholz

Comment 7

[Cristina Coroiu [:ccoroiu]]

https://hg.mozilla.org/mozilla-central/rev/c7f7fd752961