Closed Bug 1873758 Opened 1 year ago Closed 1 year ago

Misleading error message "Some cookies are misusing the recommended SameSite attribute"

Categories

(Core :: Networking: Cookies, enhancement, P3)

Firefox 121
x86_64
Linux
enhancement

Tracking

()

RESOLVED DUPLICATE of bug 1653518

People

(Reporter: gtisza, Unassigned)

References

Details

(Whiteboard: [necko-triaged])

Steps to reproduce:

Visit some website, e.g. https://en.wikipedia.org/ (or Amazon, YouTube etc).

Actual results:

The console will probably show some warnings like

Some cookies are misusing the recommended “SameSite“ attribute
Cookie “NetworkProbeLimit” does not have a proper “SameSite” attribute value. [...]

The cookies listed under this warning don't actually use the SameSite attribute at all.

Expected results:

This is a misleadingly worded warning that results in people thinking there is an error in the web application and filing bogus bug reports. The attribute is not being misused in any way; SameSite is not a required attribute, and in for many cookies there is nothing improper about leaving it unset. I understand the importance of warning people about the upcoming browser behavior change, but that should be worded like a notification and avoid loaded words like "misuse" which implies something bad is happening.

Compare e.g. with the Chrome developer console, which categorizes these messages as "breaking change" (as opposed to "warning"), hiding them by default, and the message is more neutral:

Reading cookie in cross-site context will be blocked in future Chrome versions

Setting as new since it is an enhancement. Please update component if not correct. Thank you.

Status: UNCONFIRMED → NEW
Component: Untriaged → Console
Ever confirmed: true
OS: Unspecified → Linux
Product: Firefox → DevTools
Hardware: Unspecified → x86_64
Component: Console → Networking: Cookies
Product: DevTools → Core

Since bug 1617609 is wontfix - I think we might want to consider removing the SameSite warning.

Severity: -- → S3
Priority: -- → P3
See Also: → samesitelax
Whiteboard: [necko-triaged]
Status: NEW → RESOLVED
Closed: 1 year ago
Duplicate of bug: 1653518
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.