enum HTTP::Cookie::SameSite

Possible values for the SameSite cookie as described in the Same-site Cookies Draft.

Members

None = 0

The browser will send cookies with both cross-site requests and same-site requests.

The None directive requires the secure attribute to be true to mitigate risks associated with cross-site access.

Strict = 1

Prevents the cookie from being sent by the browser in all cross-site browsing contexts.

Lax = 2

Allows the cookie to be sent by the browser during top-level navigations that use a safe HTTP method.

Methods

#lax?

View source

#none?

View source

#strict?

View source