Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Samesite cookies #6

Open
Siecje opened this issue Sep 26, 2017 · 1 comment
Open

Samesite cookies #6

Siecje opened this issue Sep 26, 2017 · 1 comment

Comments

@Siecje
Copy link
Owner

Siecje commented Sep 26, 2017

I believe same-site will prevent single sign on from working but will still have multiple services share users and passwords. Users will have to login to each application.

https://github.com/pallets/flask/blob/master/docs/security.rst

samesite cookies are not supported by Flask, but there are PR for Werkzeug and Flask.

https://github.com/pallets/werkzeug/pulls?utf8=%E2%9C%93&q=is%3Aopen%20samesite

Firefox doesn't support samesite cookies. https://caniuse.com/#search=samesite

@Siecje
Copy link
Owner Author

Siecje commented Feb 22, 2023

Flask and Firefox now support samesite cookies.

Werkzeug released support for SameSite cookies on 2017-12-31 with version 0.14.

Firefox has supported same-site cookies since version 60 released on 2018-05-08.

@Siecje Siecje changed the title Same-site cookies Samesite cookies Feb 22, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant