Topic: Firefox, the lang cookie, and the SameSite attribute

[Jasiu]

I'm seeing the following warning in the Firefox web console for my site:

Cookie “lang” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite

The URL in the message explains the issue.  Looks like a minor change to set_lang_cookie() in common.php.

Just want to make sure you are aware of this, Ken.

[saratogaWX]

Thanks for spotting that.

I've got test fixes to common.php, include-style-switcher.php and nws-alerts.js files.  I've tested on PHP 7.4, 8.0, but I don't have a PHP 5.6 to test with any more.  If you (or someone) wouldn't mind trying it and let me know if it fixes it on that release too.

[Jasiu]

I'm on 1&1 (Ionos) which requires $$$ if you want to use obsolete versions, so I can't help there.

[saratogaWX]

I'm on Ionos too, but with a VPS, so I could enable PHP 5.6 on one site to test (it worked).

I've released the fixes to the update tool for the Saratoga templates

Version 3.345 - 29-Nov-2021 (Base-*) update common.php V1.13, include-style-switcher.php V1.21 to add SameSite=Lax to cookie setting request;
(Base-USA) update nws-alertmap.js V1.01 to add SameSite=Lax to cookie setting request

For Base-*, *-Plugin, 29-Nov-2021

Thanks for bringing it to my attention, Jasiu .. there turned out to be two methods to add the SameSite=Lax to the setcookie() depending on PHP <7.3 or PHP 7.3+ so that's why I needed the test

[zmarfak]

Hey Ken,
downloaded and installed, firefox ok now.
(running php 8.0.13)

Thank you

[Jasiu]

Hey Ken,
downloaded and installed, firefox ok now.
(running php 8.0.13)

Thank you

Same but at 8.0.12.  Fantastic work as usual, Ken!  Thank you.