MC-41359: Missed SameSite cookie parameters settings
Missed SameSite cookie parameters settings. Quality patch MC-41359 for lib/web applies to Magento Open Source and Adobe Commerce 2.3.6-p1 to 2.4.2-p2.
- Categories
- Other
- Components
- lib/web, magento/module-cookie, magento/module-page-cache
- Origin
- adobe-commerce-support
No Adobe documentation page exists for this patch.
Install
Install the Quality Patches Tool with composer require magento/quality-patches, apply the prerequisites listed for all files applicable to your distribution and version first, then run vendor/bin/magento-patches apply MC-41359. On Cloud, add MC-41359 under stage.build.QUALITY_PATCHES in .magento.env.yaml.
For cweagans/composer-patches, choose a compatible version below and download the bundle. Copy its MC-41359/ folder into patches/composer/, merge composer.patches.json into composer.json, then run composer install. Bundle prerequisites the same way and list them first. Paths are relative to each package root, using the default -p1 level. Prefer local files when configuring composer-patches; a remote URL can change.
Patch files and compatible versions
magento/magento2-base >=2.3.6-p1 <2.3.7
- Magento Open Source
- 2.3.6-p1
- Adobe Commerce
- 2.3.6-p1
- Patch file
- patches/os/MC-41359_2.3.6-p1.patch
- vendor/magento/module-cookie/view/base/web/js/jquery.storageapi.extended.js
- lib/web/jquery/jquery.cookie.js
- lib/web/mage/adminhtml/tools.js
- lib/web/mage/cookies.js
magento/magento2-base >=2.4.2 <2.4.3
- Patch file
- patches/os/MC-41359_2.4.2.patch
- vendor/magento/module-cookie/view/base/web/js/jquery.storageapi.extended.js
- vendor/magento/module-page-cache/view/frontend/web/js/form-key-provider.js
- lib/web/jquery/jquery.cookie.js
- lib/web/mage/adminhtml/tools.js
- lib/web/mage/cookies.js
