"Because the "SameSite" attribute of the cookie "PHPSESSID" is set to "None" but the "Secure" attribute is missing, this cookie will be rejected in the future." What should I do if this problem occurs?

Question

Because the "SameSite" attribute of cookie "PHPSESSID" is set to "None" but the "Secure" attribute is missing, this cookie will be rejected in the future.

Answer 1

The prerequisite for setting the "SameSite" attribute to "None" is that the Secure attribute must be set at the same time, such as: Set-Cookie: widget_session=abc123; SameSite=None; Secure (Cookies can only be sent through the HTTPS protocol), otherwise it will be invalid.