Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

SameSite=None not working on Chrome incognito?

I visited this site: https://samesite-sandbox.glitch.me/ both on normal and incognito Chrome window. This happens 100% of the time both on Mac Chrome and Android Chrome. Incognito had no extensions enabled. Is this a bug? Is there a workaround?

Chrome version: 84.0.4147.105

Here's the incognito result: enter image description here

Here's the result on non-incognito window: enter image description here

like image 664
user3058763 Avatar asked Jul 30 '20 10:07

user3058763


People also ask

Why incognito mode is not working in Chrome?

If incognito mode is not working, open Chrome and click on the three-dot menu followed by Settings. Next, click on Reset and clean up followed by Restore settings to their original defaults. Click Reset settings and then try to enter the incognito mode to see if it works.

How do I set SameSite none in Chrome?

Go to chrome://flags and enable (or set to "Default") both #same-site-by-default-cookies and #cookies-without-same-site-must-be-secure. Restart Chrome for the changes to take effect, if you made any changes.

How do I fix the SameSite cookie in Chrome?

Fixing common warnings The warning appears because any cookie that requests SameSite=None but is not marked Secure will be rejected. To fix this, you will have to add the Secure attribute to your SameSite=None cookies. A Secure cookie is only sent to the server with an encrypted request over the HTTPS protocol.

Do cookies still work in incognito mode?

In Incognito, none of your browsing history, cookies and site data, or information entered in forms are saved on your device. This means your activity doesn't show up in your Chrome browser history, so people who also use your device won't see your activity.


1 Answers

Actually just found the solution From this site: https://www.chromium.org/updates/same-site/test-debug

If you are testing in Incognito Mode, be aware that the default setting for Incognito Mode is to block third-party cookies. This can lead to behavior that appears similar to cross-site cookies being blocked due to lack of a SameSite attribute. This setting can be changed on Incognito Mode's New Tab Page, or in chrome://settings/cookies.

like image 64
Daniel Angel Avatar answered Sep 19 '22 18:09

Daniel Angel