Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:99884
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain genkgo.nl designates 46.21.156.38 as permitted sender)
To: internals@lists.php.net
Message-ID: <14052ebf-efea-cb43-39e0-bdc30e493ff3@genkgo.nl>
Date: Mon, 17 Jul 2017 23:11:49 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101
 Thunderbird/52.2.1
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Language: nl-NL
Content-Transfer-Encoding: 7bit
Subject: [RFC] samesite cookie implementation
From: f.bosch@genkgo.nl (Frederik Bosch | Genkgo)

LS,

Today I finished writing the RFC for implementing same site cookies in 
PHP, https://wiki.php.net/rfc/same-site-cookie. I am happy to receive 
your remarks on the proposal, and improve when necessary.

For those (only) interested in code, have a look at PR # 2613: 
https://github.com/php/php-src/pull/2613.

For the record, I am just a messenger in this regard. Someone uploaded a 
patch for this feature in bug #72230: 
https://bugs.php.net/bug.php?id=72230. I just took the opportunity to 
create a PR and the corresponding RFC. Credits for the code go to 
xistence at 0x90 dot nl.

Hopefully, the samesite cookie flag will become a feature of the PHP 
language through this RFC!

Kind regards,
Frederik Bosch