Add ability to set cookie "samesite" setting, by updating embedded Jetty to version 9.4.23 or newer,

perwendel / spark

A simple expressive web framework for java. Spark has a kotlin DSL https://github.com/perwendel/spark-kotlin

Apache License 2.0

9.63k stars 1.56k forks source link

Add ability to set cookie "samesite" setting, by updating embedded Jetty to version 9.4.23 or newer, #1161

Closed stevemcleod closed 4 years ago

stevemcleod commented 4 years ago

Jetty 9.4.23 introduces a way to set a "samesite" value for cookies. This is needed to deal with a change introduced by Google Chrome 80 (released Feb 2020).

Relevant Jetty issue here: https://github.com/eclipse/jetty.project/issues/4247

Heroku has a good description of the problem here: https://blog.heroku.com/chrome-changes-samesite-cookie

Could we please have an update release of Spark with the latest Jetty release?

perwendel commented 4 years ago

Fixed by #1162