ring-clojure / ring

Clojure HTTP server abstraction
MIT License
3.75k stars 519 forks source link

Add "None" as possible samesite-value #373

Closed Rooke closed 5 years ago

Rooke commented 5 years ago

According to https://tools.ietf.org/html/draft-ietf-httpbis-rfc6265bis-03#section-4.1 Google is proposing a change to the cookie spec that will add the value "None" to the same-site HTTP header.

See also the Chrome change that adds this: https://www.chromestatus.com/feature/5088147346030592

This issue is to propose adding "None" as a valid key to ring's cookie middleware that handles :same-site.