GoogleChromeLabs / samesite-examples

Examples of using the SameSite cookie attribute in a variety of language, libraries, and frameworks.
https://web.dev/samesite-cookies-explained
Apache License 2.0
366 stars 62 forks source link

Same site none and secure still doesn't work in case of using an iframe inside the app from a different domain #55

Open Gautami56 opened 1 month ago

Gautami56 commented 1 month ago

There is an application A abc.com that has an iframe having content from application B xyu.com and showing xyz test page in the application A's iframe

On the xyz ie server end , the changes of samesite=none and secure is done but however the cookies that had the session id were not been passed when we called from iframe

Then figured out that the third party cookies in Google chrome were been blocked and when in settings I manually allowed third party cookies, it started to work and cookies were been passed

Not sure even on making samesite changes at server end ie xyz.com, still it's blocking third party cookies

Can someone help here please