[Checkins] [zopefoundation/Zope] c3550a: Add support for optional 'SameSite' cookie attribu...

[GitHub]

  Branch: refs/heads/2.13
  Home:   https://github.com/zopefoundation/Zope
  Commit: c3550a5542faa287d917d0cf16d42a74826c0d54
      https://github.com/zopefoundation/Zope/commit/c3550a5542faa287d917d0cf16d42a74826c0d54
  Author: Cédric Le Ninivin <cedric.leninivin at tiolive.com>
  Date:   2016-09-14 (Wed, 14 Sep 2016)

  Changed paths:
    M src/ZPublisher/HTTPResponse.py
    M src/ZPublisher/tests/testHTTPResponse.py

  Log Message:
  -----------
  Add support for optional 'SameSite' cookie attribute

As described in the definition document by the ietf:
https://tools.ietf.org/html/draft-west-first-party-cookies-07

"The 'SameSite' attribute allows servers to assert that a cookie
ought not to be sent along with cross-site requests. This assertion
allows user agents to mitigate the risk of cross-origin information
leakage, and provides some protection against cross-site request
forgery attacks."


  Commit: 1c6561633bd256979e7995233cd88e294e9a9fad
      https://github.com/zopefoundation/Zope/commit/1c6561633bd256979e7995233cd88e294e9a9fad
  Author: Cédric Le Ninivin <cedric.leninivin at tiolive.com>
  Date:   2016-09-15 (Thu, 15 Sep 2016)

  Changed paths:
    M doc/CHANGES.rst
    M src/ZPublisher/HTTPResponse.py

  Log Message:
  -----------
  Update CHANGES.rst and add explenation on SameSite cookie


  Commit: 1057219ba0cfc8dbd8ec065254f8fa2ba0e76977
      https://github.com/zopefoundation/Zope/commit/1057219ba0cfc8dbd8ec065254f8fa2ba0e76977
  Author: Tres Seaver <tseaver at palladion.com>
  Date:   2016-09-15 (Thu, 15 Sep 2016)

  Changed paths:
    M doc/CHANGES.rst
    M src/ZPublisher/HTTPResponse.py
    M src/ZPublisher/tests/testHTTPResponse.py

  Log Message:
  -----------
  Merge pull request #72 from EcrinDe/2.13

Add support for optional 'SameSite' cookie attribute


Compare: https://github.com/zopefoundation/Zope/compare/99a37fecbe58...1057219ba0cf