Cookies being rejected by Mozilla

Peter Lane Posted in General Discussion 11 months ago

I have found I get this warning from Mozilla concerning my cookies.

Some cookies are misusing the recommended “SameSite“ attribute 5
Cookie “LocalAppUser” does not have a proper “SameSite” attribute value. Soon, cookies without the “SameSite” attribute or with an invalid value will be treated as “Lax”. This means that the cookie will no longer be sent in third-party contexts. If your application depends on this cookie being available in such contexts, please add the “SameSite=None“ attribute to it. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite

I note that the Premium Components of PrivateNetwork and RememberLogin do not have the appropriate values set. I believe that this situation could cause problems as soon as Mozilla implement the promised changes for those using these components.

Replies
Breton Rafael [redcrested.net] Replied 11 months ago

Just to contribute to the discussion. The ossnchatbell cookie is on ‎components/OssnSounds/plugins/default/js/sounds.php‎ file, at lines 22, 32, 59 and 66), according to the https://github.com/opensource-socialnetwork/opensource-socialnetwork/blob/4e80cfed2f3a58070fa1c8e44578c3458d4b6516/components/OssnSounds/plugins/default/js/sounds.php#L22.

The rl_bfp is related to the RememberLogin component.

I'll check my components if this warning applies to me.

gb Peter Lane Replied 11 months ago

I am not addressing them, I am simply reporting the messages I am getting in my console. I assume reference is made to them as I use the system and they get written to my browser by the OSSN software.

German Michael Zülsdorff Replied 11 months ago

Peter,
which of these Ossn cookies do you expect to be used or ARE you using in a 3rd-party context?

gb Peter Lane Replied 11 months ago

Here are some ossn cookies

Some cookies are misusing the recommended “SameSite“ attribute 2
        Cookie “ossn_chat_bell” does not have a proper “SameSite” attribute value. Soon, cookies without the “SameSite” attribute or with an invalid value will be treated as “Lax”. This means that the cookie will no longer be sent in third-party contexts. If your application depends on this cookie being available in such contexts, please add the “SameSite=None“ attribute to it. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite opensource.socialnetwork.js:633:63
        Cookie “rl_bfp” does not have a proper “SameSite” attribute value. Soon, cookies without the “SameSite” attribute or with an invalid value will be treated as “Lax”. This means that the cookie will no longer be sent in third-party contexts. If your application depends on this cookie being available in such contexts, please add the “SameSite=None“ attribute to it. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite
Indonesian Arsalan Shah Replied 11 months ago

Free Ossn or premium modules doesn't have any cookie named LocalAppUser