Skip to content
This repository has been archived by the owner on Oct 11, 2023. It is now read-only.

Manages the new SameSite=None behavior for Rails apps that use cookie-based authentication for cross-domain requests

License

Notifications You must be signed in to change notification settings

MeisterLabs/rails_same_site_cookie

 
 

Repository files navigation

Fork of RailsSameSiteCookie

This is a fork of the gem RailsSameSiteCookie. It contains three major changes.

First, the user_agent_parser gem is removed because of slow performance.

Second, it uses whitelisting compatible browser instead of blacklisting incompatible browser for SameSite=blank. For now only Chrome 67+ is checked.

Third, only set SameSite=None for ssl requests. Otherwise leave it blank. For non-ssl requests SameSite=None doesn't work because the secure flag is required too. This is mainly relevant for non-ssl development servers.

About

Manages the new SameSite=None behavior for Rails apps that use cookie-based authentication for cross-domain requests

Resources

License

Code of conduct

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • Ruby 99.1%
  • Shell 0.9%