View Issue Details

IDProjectCategoryView StatusLast Update
0020214phpList 3 applicationBrowser Issuespublic30-05-20 12:27
Reporterduncanc Assigned To 
PrioritynormalSeverityminorReproducibilityhave not tried
Status assignedResolutionopen 
Product Version3.5.0 
Target Version3.5.4 
Summary0020214: Firefox will soon reject the browsetrail cookie
DescriptionFirefox developer tools issues a warning about the browsetrail cookie.
TagsNo tags attached.

Activities

duncanc

29-05-20 12:28

updater  

michiel

29-05-20 21:03

administrator   ~0063166


Resolved with https://github.com/phpList/phplist3/commit/ec874b7878d0d3f5844ccfe791c333d540e1e063

Assigning to @suela to handle the change log and versioning

duncanc

30-05-20 08:59

updater   ~0063167

The same applies to the PHPSESSID cookie. The warning appears only once, so I missed that previously.

michiel

30-05-20 11:58

administrator   ~0063168

Interesting. I don't get that warning on PHPSESSID. I wonder if that's a system setting.
I guess it's time to take control of the session cookie and set our own, eg phpListSessID, so that we can explicitly control the way it is set.

michiel

30-05-20 12:27

administrator   ~0063169

https://www.php.net/manual/en/session.configuration.php#ini.session.cookie-samesite

the value on my system is empty, so I'm not sure why I didn't get the warning like you, as I should have.

This should resolve it: https://github.com/phpList/phplist3/commit/1e8d95415440c3c786f5d9943ea5116096a54790