Chrome SameSite Cookies - Investigate what could possible go wrong

[danielkanchev]

This is more an awareness ticket and not a bug. Still, I consider this to be very important for core, plugins devs and themes devs, as well as integrations which rely on cookies.

With Chrome 80 a SameSite attribute is introduced. It will be set to SameSite=Lax by default unless devs of sites set it to Strict or None. Details here:

​https://www.chromestatus.com/feature/5088147346030592
​https://web.dev/samesite-cookies-explained

It is important to:

1. Check if this affects WordPress core - single and multi-site.
2. Properly communicate this with plugins/themes devs.

Feel free to edit this ticket in case it is not in the correct category, etc.

[johnbillion]

Thanks for the report @danielkanchev! We've got #37000 already, I'll close this as a dupe so we can keep the discussion in one place.

[danielkanchev]

Thanks for the info @johnbillion I am glad you are aware of this. Thanks!