Bug #131590 for CGI-Simple: Cannot set SameSite=None

Wed Jan 29 02:46:50 2020 ktat.is [...] gmail.com - Ticket created

Subject:	Cannot set SameSite=None
Date:	Wed, 29 Jan 2020 16:46:07 +0900
To:	bug-CGI-Simple [...] rt.cpan.org
From:	Atsusi Kato <ktat.is [...] gmail.com>

Hello, CGI::Simple v1.22 SameSite option can take Lax or Strict only. Chrome 80 demands SameSite=None for third party cookie. I attached a patch to add "None" to %_legal_samesite in CGI::Simple::Cookie line 184. -- Ktat mailto:ktat.is@gmail.com

Message body is not shown because sender requested not to inline it.

Thu Feb 06 01:01:16 2020 MANWAR [...] cpan.org - Severity Normal added

Thu Feb 06 01:02:02 2020 MANWAR [...] cpan.org - Broken in 1.22 added

Thu Feb 06 01:03:25 2020 MANWAR [...] cpan.org - Correspondence added

Thanks for reporting and patch. I will release the patched distribution in a day or two.

Thu Feb 06 01:03:26 2020 The RT System itself - Status changed from 'new' to 'open'

Thu Feb 06 01:03:27 2020 MANWAR [...] cpan.org - Taken

Fri Feb 07 06:03:34 2020 MANWAR [...] cpan.org - Correspondence added

Patched in v1.23

Fri Feb 07 06:03:35 2020 MANWAR [...] cpan.org - Status changed from 'open' to 'resolved'

Fri Feb 07 06:03:35 2020 MANWAR [...] cpan.org - Fixed in 1.23 added

Mon Feb 10 03:22:58 2020 ktat.is [...] gmail.com - Correspondence added

Subject:	Re: [rt.cpan.org #131590] Cannot set SameSite=None
Date:	Mon, 10 Feb 2020 17:22:17 +0900
To:	bug-CGI-Simple [...] rt.cpan.org
From:	Atsusi Kato <ktat.is [...] gmail.com>

Thanks for your applying patch. But please check the following. https://github.com/manwar/CGI--Simple/pull/9 This pull request includes test code and travis setting. Thanks. 2020年2月7日(金) 20:03 Mohammad Sajid Anwar via RT <bug-CGI-Simple@rt.cpan.org>: Show quoted text

> > <URL: https://rt.cpan.org/Ticket/Display.html?id=131590 > > > Patched in v1.23

-- -- Ktat mailto:ktat.is@gmail.com