Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:119269
MIME-Version: 1.0
References: <CAFPFaM+d_1pV__2u+rkTEOF8mPM_CSXRk3udmG-+G1oVuKbQmg@mail.gmail.com>
In-Reply-To: <CAFPFaM+d_1pV__2u+rkTEOF8mPM_CSXRk3udmG-+G1oVuKbQmg@mail.gmail.com>
Date: Sun, 15 Jan 2023 17:40:46 +0100
Message-ID: <CAOWwgpnJrHfx83wkd35J_9HwqzkB-1iRfTyqYbZ=7HB9nUhrhQ@mail.gmail.com>
To: "G. P. B." <george.banyard@gmail.com>
Cc: PHP internals <internals@lists.php.net>
Content-Type: multipart/alternative; boundary="00000000000091236a05f2502153"
Subject: Re: [PHP-DEV] [RFC] Add SameSite cookie attribute parameter
From: nicolas.grekas+php@gmail.com (Nicolas Grekas)

--00000000000091236a05f2502153
Content-Type: text/plain; charset="UTF-8"

Hi George,

Hello Internals,
>
> I would like to start the discussion about the Add SameSite cookie
> attribute parameter RFC:
> https://wiki.php.net/rfc/same-site-parameter
>
> This proposes to add an optional same site parameter to the setrawcooki(),
> setcookie() and session_set_cookie_params() that takes a a value a new
> SameSite enum:
>
> enum SameSite {
>     case None;
>     case Lax;
>     case Strict;}
>

There's quite some activity on the HTTP cookies side.
I read about SameParty and Partitioned attributes recently, see:
- https://developer.chrome.com/docs/privacy-sandbox/chips/
- https://github.com/cfredric/sameparty

Maybe we should have a plan that works for these too?

Nicolas

--00000000000091236a05f2502153--