Cookies being rejected by Mozilla

Peter Lane Posted in General Discussion 1 year ago

I have found I get this warning from Mozilla concerning my cookies.

Some cookies are misusing the recommended “SameSite“ attribute 5
Cookie “LocalAppUser” does not have a proper “SameSite” attribute value. Soon, cookies without the “SameSite” attribute or with an invalid value will be treated as “Lax”. This means that the cookie will no longer be sent in third-party contexts. If your application depends on this cookie being available in such contexts, please add the “SameSite=None“ attribute to it. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite

I note that the Premium Components of PrivateNetwork and RememberLogin do not have the appropriate values set. I believe that this situation could cause problems as soon as Mozilla implement the promised changes for those using these components.

Replies
Breton Rafael [redcrested.net] Replied 1 year ago

Just to contribute to the discussion. The ossnchatbell cookie is on ‎components/OssnSounds/plugins/default/js/sounds.php‎ file, at lines 22, 32, 59 and 66), according to the https://github.com/opensource-socialnetwork/opensource-socialnetwork/blob/4e80cfed2f3a58070fa1c8e44578c3458d4b6516/components/OssnSounds/plugins/default/js/sounds.php#L22.

The rl_bfp is related to the RememberLogin component.

I'll check my components if this warning applies to me.

gb Peter Lane Replied 1 year ago

I am not addressing them, I am simply reporting the messages I am getting in my console. I assume reference is made to them as I use the system and they get written to my browser by the OSSN software.

German Michael Zülsdorff Replied 1 year ago

Peter,
which of these Ossn cookies do you expect to be used or ARE you using in a 3rd-party context?

gb Peter Lane Replied 1 year ago

Here are some ossn cookies

Some cookies are misusing the recommended “SameSite“ attribute 2
        Cookie “ossn_chat_bell” does not have a proper “SameSite” attribute value. Soon, cookies without the “SameSite” attribute or with an invalid value will be treated as “Lax”. This means that the cookie will no longer be sent in third-party contexts. If your application depends on this cookie being available in such contexts, please add the “SameSite=None“ attribute to it. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite opensource.socialnetwork.js:633:63
        Cookie “rl_bfp” does not have a proper “SameSite” attribute value. Soon, cookies without the “SameSite” attribute or with an invalid value will be treated as “Lax”. This means that the cookie will no longer be sent in third-party contexts. If your application depends on this cookie being available in such contexts, please add the “SameSite=None“ attribute to it. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite
Indonesian Arsalan Shah Replied 1 year ago

Free Ossn or premium modules doesn't have any cookie named LocalAppUser