265634 2023-12-01 00:39:40 -0800 Samesite=Lax is not always working in Safari 2024-03-27 03:27:34 -0700 1 1 1 Unclassified WebKit WebKit2 Safari 17 Unspecified Unspecified RESOLVED FIXED https://bugs.webkit.org/show_bug.cgi?id=255524 https://bugs.webkit.org/show_bug.cgi?id=218002 https://bugs.webkit.org/show_bug.cgi?id=201646 https://github.com/edimoldovan/safari-cookies-test BrowserCompat, InRadar P2 Normal --- 1 karlcow youennf adrian.kuehni cbilling cchambers info kkinnunen m.kurz+webkitbugs webkit-bug-importer oldest_to_newest 1996141 0 karlcow 2023-12-01 00:39:40 -0800 In Bug 255524 There is a long thread of discussions around the fact that some users have issues with cookies not working. Most of the time, developers have been able to solve it by setting Samesite = None instead of Samesite = Lax. This is not an acceptable solution, security wise. ed created a demo for reproducing the issue. See Bug 255524 Comment #75 https://github.com/edimoldovan/safari-cookies-test Additional Notes: - localhost with no proxy running - someone says that this happening with iframes. The WebKit opened this bug to continue the investigation and possibly tries to identify the culprit. Todo: * Trying to get to a point where we can reliably reproduce the bug. 1997947 1 webkit-bug-importer 2023-12-08 00:40:14 -0800 <rdar://problem/119362503> 1999598 2 youennf 2023-12-14 08:45:39 -0800 Pull request: https://github.com/WebKit/WebKit/pull/21801 1999600 3 youennf 2023-12-14 08:47:36 -0800 <rdar://117905897> 1999682 4 ews-feeder 2023-12-14 12:13:38 -0800 Committed 272062@main (3096c561acce): <https://commits.webkit.org/272062@main> Reviewed commits have been landed. Closing PR #21801 and removing active labels. 2024132 5 info 2024-03-27 03:27:34 -0700 Do you plan to backport this to 16.x?