Skip to content

Commit 7707c24

Browse files
committed
Update API for SameSitemode
On framework systems, the behavior of SameSiteMode.None has changed. This PR documents the new behavior, and links to the KB articles.
1 parent c5faff8 commit 7707c24

File tree

1 file changed

+15
-2
lines changed

1 file changed

+15
-2
lines changed

xml/System.Web/SameSiteMode.xml

Lines changed: 15 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,20 @@
1414
</Base>
1515
<Docs>
1616
<summary>Specifies constants that indicate the value for the SameSite attribute of the cookie.</summary>
17-
<remarks>To be added.</remarks>
17+
<remarks>
18+
<format type="text/markdown"><![CDATA[
19+
20+
## Remarks
21+
22+
The <see cref="F:System.Web.SameSiteMode.None" /> value now causes ASP.NET to emit a SameSite cookie header to accommodate upcoming changes to SameSite cookie handling in Chrome. As part of this change, FormsAuth and SessionState cookies will be issued with SameSite = 'Lax' instead of the previous default of 'None', though these values can be overridden in web.config.
23+
24+
Before these updates have been applied, the <see cref="F:System.Web.SameSiteMode.None" /> does not emit the `SameSite` cookie header.
25+
26+
For more information on this behavior see [KB article 4531182](https://support.microsoft.com/help/4531182/kb4531182) or [KB article 4524421](https://support.microsoft.com/help/4524421/kb4524421).
27+
28+
On systems where these updates have been applied, you can specify the previous behavior by setting the `SameSiteMode` to `(SameSiteMode)(-1)`.
29+
]]></format>
30+
</remarks>
1831
</Docs>
1932
<Members>
2033
<Member MemberName="Lax">
@@ -54,7 +67,7 @@
5467
</ReturnValue>
5568
<MemberValue>0</MemberValue>
5669
<Docs>
57-
<summary>No mode is specified.</summary>
70+
<summary>Emits "SameSite=None" (see remarks).</summary>
5871
</Docs>
5972
</Member>
6073
<Member MemberName="Strict">

0 commit comments

Comments
 (0)