Ignore cookies with invalid 'SameSite' attribute values.

net/cookies/parsed_cookie.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // Portions of this code based on Mozilla:
 //   (netwerk/cookie/src/nsCookieService.cpp)
 /* ***** BEGIN LICENSE BLOCK *****
  * Version: MPL 1.1/GPL 2.0/LGPL 2.1
  *
  * The contents of this file are subject to the Mozilla Public License Version
@@ skipping 161 matching lines @@
 
   ParseTokenValuePairs(cookie_line);
   if (!pairs_.empty())
     SetupAttributes();
 }
 
 ParsedCookie::~ParsedCookie() {
 }
 
 bool ParsedCookie::IsValid() const {
-  return !pairs_.empty();
+  return !pairs_.empty() && IsSameSiteAttributeValid();
 }
 
 CookieSameSite ParsedCookie::SameSite() const {
   return (same_site_index_ == 0)
              ? CookieSameSite::DEFAULT_MODE
              : StringToCookieSameSite(pairs_[same_site_index_].second);
 }
 
 CookiePriority ParsedCookie::Priority() const {
   return (priority_index_ == 0)
@@ skipping 306 matching lines @@
                        &same_site_index_, &priority_index_};
   for (size_t i = 0; i < arraysize(indexes); ++i) {
     if (*indexes[i] == index)
       *indexes[i] = 0;
     else if (*indexes[i] > index)
       --*indexes[i];
   }
   pairs_.erase(pairs_.begin() + index);
 }
 
+bool ParsedCookie::IsSameSiteAttributeValid() const {
+  return same_site_index_ == 0 || SameSite() != CookieSameSite::DEFAULT_MODE;
+}
+
 }  // namespace