This release by default now stores additional cookies for backward compatibility when using the SameSite
attribute, for those older browsers that do not understand SameSite=None
. As well as creating the normal transaction cookies with Secure=true
and SameSite=none
, it also stores a _x_compat
cookie (where x
is the name of the original cookie) which only sets Secure=true
.
If the generation of these extra cookies is undesirable or unnecessary for your use case, you can turn them back off by setting legacySameSiteCookie: false
in the SDK configuration.
Added
- Add compatibility cookie for SameSite, with option to turn it off #1232 (stevehobbsdev)