<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>257845</bug_id>
          
          <creation_ts>2023-06-07 22:27:54 -0700</creation_ts>
          <short_desc>SameSite=None cookies are rejected unless the Secure attribute is set. Differences with other browsers</short_desc>
          <delta_ts>2023-06-12 16:07:00 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>New Bugs</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>NEW</bug_status>
          <resolution></resolution>
          
          <see_also>https://bugs.webkit.org/show_bug.cgi?id=255524</see_also>
          <bug_file_loc>https://samesite-sandbox.glitch.me</bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>BrowserCompat, InRadar, WPTImpact</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Karl Dubost">karlcow</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>achristensen</cc>
    
    <cc>cbilling</cc>
    
    <cc>webkit-bug-importer</cc>
    
    <cc>wilander</cc>
    
    <cc>youennf</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1960494</commentid>
    <comment_count>0</comment_count>
    <who name="Karl Dubost">karlcow</who>
    <bug_when>2023-06-07 22:27:54 -0700</bug_when>
    <thetext>Steps to reproduce: 

1. Go to https://samesite-sandbox.glitch.me

See differences in between Safari, Firefox Nightly and Chrome Canary

2. Go to https://samesitetest.com/

See differences in between Safari, Firefox Nightly and Chrome Canary

It would be good to figure out the differences and how it impacts web compatibility. 


Maybe that would explain some of the issues detected in the comments of Bug 255524


But this one seems to be an obvious one.
https://wpt.fyi/results/cookies/samesite-none-secure/cookies-without-samesite-must-be-secure.https.html?label=master&amp;label=experimental&amp;aligned&amp;q=samesite

Also 
https://wpt.fyi/results/cookies/samesite?label=master&amp;label=experimental&amp;aligned&amp;q=samesite</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1960495</commentid>
    <comment_count>1</comment_count>
    <who name="Radar WebKit Bug Importer">webkit-bug-importer</who>
    <bug_when>2023-06-07 22:28:04 -0700</bug_when>
    <thetext>&lt;rdar://problem/110442616&gt;</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>