Console warnings in Chrome browser: A cookie associated with a cross-site resource at <URL> was set without the `SameSite` attribute.
For the past few weeks, I've been seeing console warnings in the Chrome browser development tools like this: A cookie associated with a cross-site resource at https://static.zdassets.com/ was set without the `SameSite` attribute. A future release of Chrome will only deliver cookies with cross-site requests if they are set with `SameSite=None` and `Secure`. You can review cookies in developer tools under Application>Storage>Cookies and see more details at https://www.chromestatus.com/feature/5088147346030592 and https://www.chromestatus.com/feature/5633521622188032.
These warnings appear for the HelpDesk:
These warnings appear for agent admin,
Is this something that will need to be addressed by Zendesk? Will we need to modify document_head.hbs or script.js?
-
Jumping in as this is now causing issues for our end-users as well.
-
Hello,
I'm still having this warning :A cookie associated with a cross-site resource at https://assets.zendesk.com/ was set without the `SameSite` attribute. A future release of Chrome will only deliver cookies with cross-site requests if they are set with `SameSite=None` and `Secure`.
Is there some news from zendesk ?
Thank you
-
Hey Maxime,
I did some digging on my end but it doesn't look like we have any updates to provide at this time. This issue still occurs even after clearing your browsers cache/cookies? If so, I'm happy to bring this into a ticket so our Advocacy team can dig into this further with you.
I also encourage you to take a look at the following article as it provides some additional information on cookie restricted browsers: Zendesk support for cookie-restricted browsers (Safari, Chrome)
I hope this helps!
-
Hello Brett,
After cleaning my browser cache/cookie I have no more alerts.
Thank you,
-
Glad to hear it Maxime!
-
I have been able to reproduce this issue on Firefox and I am not sure what is the workaround.
Camille
-
Hello Camille,
So after checking with our dev team, we don't currently have any updates to announce on this. I would recommend for now sharing your use case in the following article as it is the one we are actively monitoring regarding this issue.
Zendesk Support for cookie-restricted browsers (Safari, Chrome)
Best regards.
-
Hello Ryan,
A workaround that you can do to resolve this issue is by setting the Chrome://flags/#same-site-by-default-cookies flag to disabled for the meantime.
We currently need to disable SameSite default by cookies, because Chrome rolled out an update that blocks cookies without cross-site requests if they are not set with ‘SameSite=None’ and ‘Secure.’ However, last April 3, they recently did a rollback of this update for Chrome 80 in light of global circumstances due to COVID-19. For more details about it, you may check this article: Chrome's SameSite Updates.
I hope this helps! Let me know if you have further questions or clarifications.
Best regards,
Please sign in to leave a comment.
38 Comments