Ignore cookies with invalid 'SameSite' attribute values.

net/cookies/cookie_constants.cc

Index: net/cookies/cookie_constants.cc
diff --git a/net/cookies/cookie_constants.cc b/net/cookies/cookie_constants.cc
index b618261f8b2a30356688d3dcb60291a2e732b088..fdcac288e070a3afe57a534235ac66156feb8628 100644
--- a/net/cookies/cookie_constants.cc
+++ b/net/cookies/cookie_constants.cc
@@ -52,7 +52,7 @@ CookieSameSite StringToCookieSameSite(const std::string& same_site) {
     return CookieSameSite::LAX_MODE;
   if (base::EqualsCaseInsensitiveASCII(same_site, kSameSiteStrict))

[mmenke, 2016/04/06 15:16:30]

From spec:

1. If "cookie-av"'s "attribute-value" is not a case-sensitive match for "Strict"
or "Lax", ignore the "cookie-av".

Either the spec is wrong, or this code is.  Given that the next line mentions a
case-insensitive comparison to "Lax", I suspect it's the spec.

     return CookieSameSite::STRICT_MODE;
-  return CookieSameSite::DEFAULT_MODE;
+  return CookieSameSite::INVALID_MODE;
 }
 
 }  // namespace net