Third-party Cookies Issues with latest security Updates, Google Chrome 2020

[Michel Castaño]

Chrome 83 arrived and with it new safety and privacy settings, and one of them affects directly third-party cookies (More details here)

This affects specially Apps embedded inside Pegasus Apps’ module because Apps uses cookies in form of sessions, and variables stored in such cookies becomes empty due to security protocol

Google support says that it is necessary to add a header like this:

document.cookie = 'cross-site-cookie2=noneCookie; SameSite=None; Secure';

In all of the third party app-s files which stores data. To make this header general we suggest to enable the General Headers in your Server. The following are the instructions to activate General Headers in Linux-Ubuntu:

 

1. Activate “Headers Module”

a2enmod headers

2. Modify httpd.conf with the following line:

Header edit Set-Cookie ^(.*)$ "$1; Secure; SameSite=None"

 

3. Restart Server:

service apache2 restart

[Author]

Posts