filestack / filestack-js

Official Javascript SDK for the Filestack API and content ingestion system.
https://www.filestack.com
MIT License
206 stars 77 forks source link

Chrome now blocking "cookie associated with a cross-site resource at http://dialog.filepicker.io/" #378

Open jpwynn opened 4 years ago

jpwynn commented 4 years ago

Our Rails 4.2 app is using filepicker-rails (1.3.0) ... old I know, but has been working fine.

On certain Windows 10 computers the uploader button no longer displays as a button, not on Chrome, Firefox, or Edge... they all show the input field.

I don't know if it is related to our issue, but for any pagewith a button that displays the Filepicker upload widget Chrome console now shows:

A cookie associated with a cross-site resource at http://dialog.filepicker.io/ was set without the SameSite attribute. It has been blocked, as Chrome now only delivers cookies with cross-site requests if they are set with SameSite=None and Secure. You can review cookies in developer tools under Application>Storage>Cookies and see more details at https://www.chromestatus.com/feature/5088147346030592 and https://www.chromestatus.com/feature/5633521622188032

We're using the old-style widget like this:

<input name="profile_pic_widget" type="filepicker" data-fp-apikey="AAAAAAA" 
data-fp-store-path="tmp_contact_pics/BBBBBBBB/"
data-fp-button-text="<i class='fa fa-upload'></i>&nbsp;Upload Photo file" 
data-fp-button-class="bd-button med-button grayish"
data-fp-openTo="COMPUTER"
data-fp-multiple="FALSE"
data-fp-store-location="S3"
data-fp-store-container="CCCCCCCCCC"
data-fp-mimetypes="image/*" data-fp-container="modal" data-fp-maxsize="10000000" data-fp-services="COMPUTER,URL" 
onchange="set_photo_pic('<img src=' + event.fpfile.url + '/convert?w=175&h=175&format=png />', event.fpfile.url + '+.png/convert?w=175&h=175&format=png');">

If we must upgrade to a later filestack-rails, what version will should fine for all browsers/OS with the minimum of breaking changes?