Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:119294
Return-Path: <tim@bastelstu.be>
Delivered-To: mailing list internals@lists.php.net
Received: (qmail 64329 invoked from network); 17 Jan 2023 15:45:15 -0000
Received: from unknown (HELO php-smtp4.php.net) (45.112.84.5)
  by pb1.pair.com with SMTP; 17 Jan 2023 15:45:15 -0000
Received: from php-smtp4.php.net (localhost [127.0.0.1])
	by php-smtp4.php.net (Postfix) with ESMTP id EA501180538
	for <internals@lists.php.net>; Tue, 17 Jan 2023 07:45:11 -0800 (PST)
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on php-smtp4.php.net
X-Spam-Level: 
X-Spam-Status: No, score=-2.1 required=5.0 tests=BAYES_00,DKIM_SIGNED,
	DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,SPF_HELO_NONE,SPF_PASS,
	T_SCC_BODY_TEXT_LINE autolearn=no autolearn_force=no version=3.4.2
X-Spam-ASN: AS24940 176.9.0.0/16
X-Spam-Virus: No
X-Envelope-From: <tim@bastelstu.be>
Received: from chrono.xqk7.com (chrono.xqk7.com [176.9.45.72])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by php-smtp4.php.net (Postfix) with ESMTPS
	for <internals@lists.php.net>; Tue, 17 Jan 2023 07:45:11 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=bastelstu.be;
	s=mail20171119; t=1673970308;
	bh=wX505b4+YKE6oRSTENdCpNHh8/B8/+dECw/nuFJTV6E=;
	h=Date:Subject:To:Cc:References:From:In-Reply-To:From;
	b=au5IFAkJ3FAAZXPkbxTSgoCEyQTGKKQD5jedwXJfXbpBUE4L8hL++DQueWxanPtvp
	 uWisR6VIg7UAX8x/6Y4pojQprKjv6cZRw8dAtwitaF+SJNKifKqLZt1eQiRzhzU9xb
	 IUAxV/U3uf4uYBo/pLvCMevlBAqNll9WiekNm/kw+RMTbef0PDFDYQhzPT1OqbWAAu
	 d9j9ghVMD6mWdcsXWwHYd6uKeIJ2rkdiCgpFPPLuiXnrQuAAVUFYHX6pvBHVKLdHcC
	 VlT6x+aCZh34DAcprDeiAbhSQDERPS/wzITPaTYP2FImvy0wimPBA0Mpt8VKFrHO/4
	 YnREuY6Q0hkdA==
Message-ID: <0df9fc23-e908-713f-86ca-b6a0e04243b3@bastelstu.be>
Date: Tue, 17 Jan 2023 16:45:07 +0100
MIME-Version: 1.0
Content-Language: en-US
To: "G. P. B." <george.banyard@gmail.com>,
 Christian Schneider <cschneid@cschneid.com>
Cc: PHP internals <internals@lists.php.net>
References: <CAFPFaM+d_1pV__2u+rkTEOF8mPM_CSXRk3udmG-+G1oVuKbQmg@mail.gmail.com>
 <CAOWwgpnJrHfx83wkd35J_9HwqzkB-1iRfTyqYbZ=7HB9nUhrhQ@mail.gmail.com>
 <CAFPFaMKTaQDSJXFfos=3sdL7ddSrje_aHWcg67GA9jXPe8uhew@mail.gmail.com>
 <22D992B7-62B3-4A4F-934F-17D53058FD35@cschneid.com>
 <CAFPFaM+M-g+YmsTaxzq9c-94AGNL=coxbtu4nn4ryvOPUtfsTg@mail.gmail.com>
In-Reply-To: <CAFPFaM+M-g+YmsTaxzq9c-94AGNL=coxbtu4nn4ryvOPUtfsTg@mail.gmail.com>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Subject: Re: [PHP-DEV] [RFC] Add SameSite cookie attribute parameter
From: tim@bastelstu.be (=?UTF-8?Q?Tim_D=c3=bcsterhus?=)

Hi

On 1/17/23 15:59, G. P. B. wrote:
>> Side-Note: Isn't SameSite a very generic name in the global namespace? I'm
>> not sure what the PHP policy is here.
>>
> 
> AFAIK the global namespace is "owned" by PHP so that shouldn't be an issue
> per the usual policy.
> 

It's still pretty generic even if it does not collide with any userland 
code. It would not be unlikely to have something named "SameSite" in the 
future that is not related to cookies, e.g. for some other HTTP-related 
thing.

Best regards
Tim Düsterhus