From emaringolo at gmail.com  Sat Nov 28 18:25:32 2020
From: emaringolo at gmail.com (Esteban Maringolo)
Date: Sat, 28 Nov 2020 15:25:32 -0300
Subject: [Seaside-dev] Cookie tracking and SameSite setting
Message-ID: <CAJMgPCJ5=swr114NrHpawRjEonOtBJOAiMJaLd4oHjt4hXKatA@mail.gmail.com>

Hi all,

I have an application that has a Cookie based tracking strategy, but
given that the SameSite setting is hardcoded to be 'Strict' it forbids
(and actually breaks) the behavior of my Seaside app when it is
embedded into an <iframe> in a third party domain.

Should this SameSite setting be configurable somehow?

The only way I found to do this was by subclassing the tracking strategy class.

Regards,

Esteban A. Maringolo