By mcdruid on
Change record status: 
Published (View all published change records)
Project: 
Drupal core
Introduced in branch: 
7.x
Introduced in version: 
7.93
Issue links: 
https://www.drupal.org/node/3284269
Description: 

A SameSite attribute of Lax has been added to the following "utility" cookies in Drupal 7:

  • Drupal.tableDrag.showWeight
  • Drupal.toolbar.collapsed

The cookies would be treated as SameSite=Lax by default in most browsers anyway in the absence of the attribute, so it's unlikely this will result in any change of behaviour.

Setting the attribute explicitly means that the cookies comply with up-to-date standards and avoids some browsers emitting warnings.

These cookies are simple boolean on/off flags typically used by the admin UI, so their values are not sensitive.

Impacts: 
Site builders, administrators, editors
Module developers
Themers