tree ecc421b325bfc585e19886a6833b0b43f9d4623d
parent 2be92345b2155b6d4e1f33d4c61251ccaf3ac12b
author Lily Chen <chlily@chromium.org> 1556235465 +0000
committer Commit Bot <commit-bot@chromium.org> 1556235465 +0000

Add flag to chrome://flags for "Cookies without SameSite must be secure"

This CL adds a flag to chrome://flags to enable "Cookies without
SameSite must be secure". When enabled, any cookies without SameSite
restrictions that do not specify the Secure attribute will be treated
as Secure (if set from a secure URL), or rejected (if set from an
insecure URL). This flag only has an effect if "SameSite by default
cookies" is also enabled.

Bug: 954551
Change-Id: Ib2f6cbdb5d6d5e39ccba16e23bd5a62e7b62cfb9
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/1578945
Commit-Queue: Lily Chen <chlily@chromium.org>
Reviewed-by: Maks Orlovich <morlovich@chromium.org>
Cr-Original-Commit-Position: refs/heads/master@{#654254}
Cr-Mirrored-From: https://chromium.googlesource.com/chromium/src
Cr-Mirrored-Commit: eb304c8f9c6878e4a3ad0c707ca63abda36f52f3