A cookie associated with a cross-site resource at http://cloudflare.com/ was set without the `SameSite` attribute

Website, Application, Performance Security
1

I’m using Chrome Canary (Version 77.0) and it warned me!
[Deprecation] A cookie associated with a cross-site resource at http://Cloudflare.com/ was set without the SameSite attribute. Starting in M77, Chrome will only deliver cookies with cross-site requests if they are set with SameSite=None. You can review cookies in developer tools under Application>Storage>Cookies and see more details at Chrome Platform Status.

Annotation%202019-06-07%20134943
Annotation%202019-06-07%201349431328×183 31.8 KB

Is this a security error caused by Cloudflare?

2 Likes
3

Regarding adding the attribute SameSite to the cfduid cookie, this is now added to the __cfduid cookie and will be present on all Dynamic resources.

For any cached resource which is using this cookie, you will need to Purge the cache.