Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

proposal: net/http: add check for SameSite client incompatibility #36539

Closed
jeffdupont opened this issue Jan 13, 2020 · 6 comments
Closed

proposal: net/http: add check for SameSite client incompatibility #36539

jeffdupont opened this issue Jan 13, 2020 · 6 comments
Labels
FeatureRequest FrozenDueToAge Proposal
Milestone
Proposal

Comments

@jeffdupont
Copy link
Contributor

I'm looking to implement a helper method based on the SameSite known incompatible clients.

https://www.chromium.org/updates/same-site/incompatible-clients
@gopherbot
Copy link

Change https://golang.org/cl/214600 mentions this issue: http: add support to determine if client supports the SameSite cookie parameter

@jeffdupont jeffdupont changed the title Cookie helper for SameSite useragent incompatibility Check for SameSite Client incompatibility Jan 13, 2020
@jeffdupont jeffdupont changed the title Check for SameSite Client incompatibility Check for SameSite client incompatibility Jan 13, 2020
@smasher164 smasher164 changed the title Check for SameSite client incompatibility net/http: add check for SameSite client incompatibility Jan 14, 2020
@smasher164 smasher164 changed the title net/http: add check for SameSite client incompatibility proposal: net/http: add check for SameSite client incompatibility Jan 14, 2020
@gopherbot gopherbot added this to the Proposal milestone Jan 14, 2020
@smasher164
Copy link
Member

Since this is very user-agent-specific, I'm not sure that net/http is the best place for this to leave (based off the CL). An external library or maybe x/net might suit this feature better. /cc @bradfitz

@jeffdupont
Copy link
Contributor Author

jeffdupont commented Jan 14, 2020 via email

@bradfitz
Copy link
Contributor

Sorry, we don't want to go down the road of adding user agent sniffing APIs to the standard library. That's a huge maintenance burden, somewhat frail, and arguably not good for the web.

This can live elsewhere, of course. (https://golang.org/doc/faq#x_in_std)

@bradfitz
Copy link
Contributor

Also: https://groups.google.com/a/chromium.org/forum/m/#!msg/blink-dev/-2JIRNMWJ7s/yHe4tQNLCgAJ ("Intent to Deprecate and Freeze: The User-Agent string")

@jeffdupont
Copy link
Contributor Author

jeffdupont commented Jan 14, 2020 via email

@golang golang locked and limited conversation to collaborators Jan 13, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
FeatureRequest FrozenDueToAge Proposal
Projects
None yet
Milestone
Proposal
Development

No branches or pull requests
4 participants
@bradfitz @jeffdupont @gopherbot @smasher164