search

utterance / utterances

:crystal_ball: A lightweight comments widget built on GitHub issues
https://utteranc.es
MIT License
8.7k stars 565 forks source link

Samesite attribute is now mandatory #212

Closed octoxalis closed 4 years ago

octoxalis commented 4 years ago

Chrome has a new recommendation:

A cookie associated with a cross-site resource at http://utteranc.es/ was set without theSameSiteattribute. A future release of Chrome will only deliver cookies with cross-site requests if they are set withSameSite=NoneandSecure. You can review cookies in developer tools under Application>Storage>Cookies and see more details at https://www.chromestatus.com/feature/5088147346030592 and https://www.chromestatus.com/feature/5633521622188032.

Idem for cloudflare.com

Please set this attribute.

jdanyow commented 4 years ago

Thanks, will do.

jdanyow commented 4 years ago

note- cloudflare has not fixed their cfuuid cookie.

crguezl commented 4 years ago

Is this issue fixed?

I am still having the same issue when using Chrome with my blogs

ull-esit-dsi-1819.github.io/:1 
A cookie associated with a cross-site resource at http://utteranc.es/ was set without the `SameSite` attribute. 
It has been blocked, as Chrome now only delivers cookies with cross-site requests 
if they are set with `SameSite=None` and `Secure`. 
You can review cookies in developer tools under Application>Storage>Cookies and see more details at
 https://www.chromestatus.com/feature/5088147346030592 and
 https://www.chromestatus.com/feature/5633521622188032
joostmeijles commented 4 years ago

Same issue here. How to fix it?

jdanyow commented 4 years ago

@joostmeijles could you share a link? I'm not seeing this warning anymore.

joostmeijles commented 4 years ago

@joostmeijles could you share a link? I'm not seeing this warning anymore.

https://joost.meijles.com/xc9-jwt/

@jdanyow any clues?

nebrelbug commented 4 years ago

@jdanyow I'm having the same problem.

nebrelbug commented 4 years ago

@jdanyow it only works when I disable 3rd-party cookies... is there some way to fix this?

kaknut commented 4 years ago

I am seeing the same warning message on my developer console.

YunfeiZHAO commented 3 years ago

I still have this problem , someone fixed that?

danfleser commented 2 years ago

How do I fix this? I have a nextjs ssr blog.