Cookie “_unpoly_demo_layers_session” does not have a proper “SameSite” attribute value

[hpvd]

Bug description

Message from FF dev Tools

Cookie “_unpoly_demo_layers_session” does not have a proper “SameSite” attribute value. Soon, cookies without the “SameSite” attribute or with an invalid value will be treated as “Lax”. This means that the cookie will no longer be sent in third-party contexts. If your application depends on this cookie being available in such contexts, please add the “SameSite=None“ attribute to it. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite

Reproduction project

Demo Website
https://demo.unpoly.com/tasks

Steps to reproduce the behavior:

1. open firefox
2. go to https://demo.unpoly.com/tasks
3. enable Developer Tools
4. disable cache
5. remove all cookies
6. reload page
7. see message in output (see screenshot)

Expected behavior

no warning / future-proof “SameSite” attribute value

Browser version

• Windows
• Firefox
• 118

Additional context

none

[hpvd]

Detail:

[hpvd]

related to discussion
Add CSP to demo unpoly/unpoly#540

[hpvd]

no warning anymore in current version of demo (3.10)