dozoisch / dozoisch/react-google-recaptcha

Problem with Cookies, SameSite property

Open
#218 4 comments 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
1.1k
Forks
148
PR merge metrics
No merged PRs in 30d

Description

react-google-recaptcha version: 2.1.0
react-async-script version: ^1.1.1

## Problem
In chrome, inside of inspect element, there is a section for issues, where it creates some issue of your website. And It created this issue:

#### Indicate whether to send a cookie in a cross-site request by specifying its SameSite attribute
Because a cookie’s SameSite attribute was not set or is invalid, it defaults to SameSite=Lax, which prevents the cookie from being sent in a cross-site request. This behavior protects user data from accidentally leaking to third parties and cross-site request forgery.

Resolve this issue by updating the attributes of the cookie:
- Specify SameSite=None and Secure if the cookie should be sent in cross-site requests. This enables third-party use.
- Specify SameSite=Strict or SameSite=Lax if the cookie should not be sent in cross-site requests.

Affect Resources
12 cookies (It is complicated to show these values)
30 requests (It is complicated to show these values)

![Screenshot from 2021-07-21 14-24-43](https://user-images.githubusercontent.com/8339935/126532575-ea9bb18d-d5b9-43af-a621-2a0e1d11f60b.png)

Probably we are forgetting to pass the `SameSite = none` in our fetch.
Sorry if this issue is incomplete, but just ask to me and I will look for the missing information.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.