﻿id	summary	reporter	owner	description	type	status	component	version	severity	resolution	keywords	cc	stage	has_patch	needs_docs	needs_tests	needs_better_patch	easy	ui_ux
30862	Explicitly SameSite: None cookies.	Osaetin Daniel	Osaetin Daniel	"When setting cookies (with `.set_cookie` and `set_signed_cookie`) the default value for the `samesite` argument is None but the problem here is that Django doesn't do anything with the `None` value.

This behaviour used to be fine because most browsers assumed that a missing `samesite` attribute on a cookie meant None. But now, Chrome has issued a warning that `samesite` has to be explicitly set to None else the cookies won't be sent for cross-origin requests.

https://www.chromestatus.com/feature/5633521622188032

"	New feature	closed	HTTP handling	dev	Normal	fixed	cookies,request,response		Ready for checkin	1	0	0	0	0	0
