I apologize if I'm repeating this question but I've spent over 6 days on this and I'm losing my mind. I can't seem to get that warning to disappear even though I've meticulously tried and retried to add these in my php index before the and tags. I've tried posts on SameSite warning Chrome 77 to use
response.setHeader("Set-Cookie", "HttpOnly;Secure;SameSite=Strict");
as well as posts here How to solve `SameSite` attribute to use
header('Set-Cookie: cross-site-cookie=name; SameSite=None; Secure');
as well as the examples on here https://github.com/GoogleChromeLabs/samesite-examples/blob/master/php.md
and I'm still getting the warning even though everything else hasn't changed. Am I missing something or doing something wrong? Sorry, I suppose it shouldn't be a big deal but I'm so ocd over these warning messages and errors that's popping up I wish they would go away! Thx in advance.
-update- sorry the warning that pops up in console in question is this
A cookie associated with a cross-site resource at http://google.com/ was set without the `SameSite` attribute. A future release of Chrome will only deliver cookies with cross-site requests if they are set with `SameSite=None` and `Secure`. You can review cookies in developer tools under Application>Storage>Cookies and see more details at https://www.chromestatus.com/feature/5088147346030592 and https://www.chromestatus.com/feature/5633521622188032.
Make sure your browser is fully updated (see minimum browser requirements) Check that JavaScript is enabled in your browser. Try disabling plugins that might conflict with reCAPTCHA.
SameSite=None requires Secure The warning appears because any cookie that requests SameSite=None but is not marked Secure will be rejected. To fix this, you will have to add the Secure attribute to your SameSite=None cookies. A Secure cookie is only sent to the server with an encrypted request over the HTTPS protocol.
Go to chrome://flags and enable (or set to "Default") both #same-site-by-default-cookies and #cookies-without-same-site-must-be-secure. Restart Chrome for the changes to take effect, if you made any changes.
An outdated web browser can cause many issues, including with Google's reCAPTCHA service. You should update your browser to the latest version and see if that fixes the problem. It's easy to update most browsers, including Google Chrome, Mozilla Firefox, and Microsoft Edge.
The warning is specifically for the cookie coming from "google.com
" so you will not be able to affect it. If any of the console warnings refer to domains you control, then you should be following that advice to update your SameSite
attributes.
It does mean that you will continue to see these warnings until the affected domains update their cookies, which should be happening over the coming months. The enforcement of this behaviour is not planned until Chrome 80, which will be stable in February. So, no actual site/service functionality should be affected in stable Chrome before then.
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With