Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(97)

Unified Diff: net/cookies/canonical_cookie.cc

Issue 1783813002: SameSite: Strict/Lax behavior. (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@strict-lax
Patch Set: WIP. Created 4 years, 9 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: net/cookies/canonical_cookie.cc
diff --git a/net/cookies/canonical_cookie.cc b/net/cookies/canonical_cookie.cc
index 5647a22052b385efb283444ea0f583ae91d59ba0..7d8cdbf9942c722fe2e9127e23f52d8fb0587a4e 100644
--- a/net/cookies/canonical_cookie.cc
+++ b/net/cookies/canonical_cookie.cc
@@ -422,14 +422,8 @@ bool CanonicalCookie::IncludeForRequestURL(const GURL& url,
if (!IsOnPath(url.path()))
return false;
// Don't include same-site cookies for cross-site requests.
- //
- // TODO(mkwst): This currently treats both "strict" and "lax" SameSite cookies
- // in the same way. https://codereview.chromium.org/1783813002 will eventually
- // distinguish between them based on attributes of the request.
- if (SameSite() != CookieSameSite::NO_RESTRICTION &&
- !options.include_same_site()) {
+ if (SameSite() > options.include_same_site())
return false;
- }
return true;
}

Powered by Google App Engine
This is Rietveld 408576698