Response cookies Append inconsistently applies SameSite default
Tratcher opened this issue · 1 comments
Tratcher commented
The two Append overloads have inconsistent behavior for the samesite property that was added in 2.0.
context.Response.Cookies.Append("Name1", "Value1");
context.Response.Cookies.Append("Name2", "Value2", new CookieOptions());
Set-Cookie:Name1=Value1; path=/
Set-Cookie:Name2=Value2; path=/; samesite=lax
The two overloads should have the same defaults.
I noticed because we're making changes to CookiePolicy for http://github.com/aspnet/Security/issues/1561 and adding it to the templates. This will have the side-effect of causing the Append API to consistently use the second overload's behavior.
aspnet-hello commented
This issue was moved to dotnet/aspnetcore#2675