Meteor-Community-Packages / Meteor-Community-Packages/meteor-fast-render
`meteor_login_token` cookie : `SameSite` & `Secure` attributes
Open
enhancement
- Dominant language
- JavaScript
- Stars
- 13
- Forks
- 5
- PR merge metrics
- No merged PRs in 30d
Description
Hi !
Thanks for this great library !
Firefox is warning that `meteor_login_token` hasn't `SameSite` & `Secure` attributes set in a secure way.
It warns that it'll won't be supported anymore soon.
Maybe FR should allow to specify a `safe` option that automatically sets `SameSite` to `Strict` and add `Secure` attribute ?
See you
Contributor guide
Research direction
No file, test, or entry point is named. Start by locating where the `meteor_login_token` cookie is created, then verify how its `SameSite` and `Secure` attributes are set. Done means the proposed safe option has a defined behavior that addresses Firefox's warning.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- authentication, security
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100