Showing questions for topic:
Showing questions tagged:

Firefox not remembering cookie permissions

I'm having problems with a website constantly asking me to accept cookie permissions. It happens on some other sites occasionally, but this particular site is one that I … (read more)

I'm having problems with a website constantly asking me to accept cookie permissions. It happens on some other sites occasionally, but this particular site is one that I use each day.

When I visit the site I get the cookie permissions box. I click accept all cookies. No matter how many links I click I am presented with the box yet again. It doesn't happen with Chrome, Edge or Brave.

Archived 9 260

Firefox claims SameSite is set to Lax, while set-cookie contains SameSite=None and Secure

Our backend sets a cookie for maintaining login sessions with SameSite=None and Secure (to support loading our front-end from localhost for developers and from a third pa… (read more)

Our backend sets a cookie for maintaining login sessions with SameSite=None and Secure (to support loading our front-end from localhost for developers and from a third party domain for PR previews).

This is the respose header:

set-cookie: ESESSIONID=<redacted>; Secure; HttpOnly; Path=/; SameSite=None; Max-Age=86399

However, Firefox does not send the cookie back with requests, but logs this error in the console:

Cookie “ESESSIONID” has been rejected because it is in a cross-site context and its “SameSite” is “Lax” or “Strict”.

We have worked around the issue by configuring exceptions in the Security & Privacy settings, but I am curious to why Firefox rejects the cookie with this error message.

Archived 1 290