Comment 2 for bug 1943525

Revision history for this message
Doris Tam (doristam) wrote :

To test this bug:

Locally test this for 'http' mode.
1. Before applying the fix, open the developer console in the browser to see the 'SameSite' warning. This will appear on any page in Mahara.
2. After applying the patch, the console warning goes away.

Warning:
Cookie “mahara” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite