search

expressjs / csurf

CSRF token middleware
MIT License
2.3k stars 216 forks source link

Support sameSite none option #202

Closed AGrigorii closed 4 years ago

AGrigorii commented 4 years ago

In February of the 2019 it's planning to release chrome browser v80, where sameSite flags would be enabled by default. In order to have possibility set sameSite option to none value, we have to update cookie package to version v0.4.0

dougwilson commented 4 years ago

Hi @AGrigorii thanks for your updates. As I said in the other PR, let's wait for the original PR person to respond to see if they are interesting in updating their PR. I don't think it would be fair to review their PR and then just merge someone else's when they are (by the nature of making the PR) inclined to make a contribution.

AGrigorii commented 4 years ago

Let's wait. All, what I need - to get these changes. Who will be the author of that, doesn't matter :) I'm scaring a little bit, that speed of reaction would not be so fast, it is the only reason, why I was created yet another one.

AGrigorii commented 4 years ago

Doug, may you clarify, how long are you planning to wait parallel pr?

AGrigorii commented 4 years ago

What's new?