SameSite=None Cookie (ARCH9136)
Esta página aún no está disponible en tu idioma.
Key swift.security.samesite-none-cookie · Severity warning · Category security · CWE CWE-1275
Flags HTTPCookies.Value(sameSite: .none) without isSecure: true - browsers reject the cookie and cross-site CSRF posture weakens.
Incorrect
Section titled “Incorrect”HTTPCookies.Value(string: token, sameSite: .none)Correct
Section titled “Correct”HTTPCookies.Value(string: token, isSecure: true, isHTTPOnly: true, sameSite: .none)Pass isSecure: true with sameSite: .none, or use .lax when cross-site is not required.