HomeWinBuzzer NewsMicrosoft Tests SameSite Cookies in Edge with Plans for Internet Explorer Support

Microsoft Tests SameSite Cookies in Edge with Plans for Internet Explorer Support

Windows 10 build 17672 enables SameSite cookie support in Edge, protecting against cross-site forgery attacks and giving new tools to web developers. The feature will eventually roll out to users on the Creators update.

-

is testing the SameSite cookies in Insider builds via an update to its Edge browser. Build 17672 enables the standard, which gives users protection against cross-site forgery attacks.

“Historically, sites such as example.com that make ‘cross-origin' requests to other domains such as microsoft.com have generally caused the browser to send microsoft.com's cookies as part of the request,” said the team. “Normally, the user benefits by being able to reuse some state (e.g., login state) across sites no matter from where that request originated. Unfortunately, this can be abused, as in CSRF attacks. Same-site cookies are a valuable addition to the defense in depth against CSRF attacks.”

Going forward, web developers will be able to set the SameSite attribute on cookies of their choice via the Set-Cookie header. This should prevent the browser from sending cookies in cross-site requests or set specific circumstances where they're not allowed.

Backward Compatible

Though this is currently exclusive to , Microsoft plans to roll it out to users on the Creators Update or higher if it goes well. Either way, the attribute will be backward compatible with earlier browser versions, which will simply ignore it.

The team is planning to support to SameSite cookies even though it's not a finalized standard at the IETF. It's stability and compelling nature are apparently enough to warrant an early implementation as its standardization progresses.

You can read more about the support on the Windows blog.

SourceMicrosoft
Ryan Maskell
Ryan Maskellhttps://ryanmaskell.co.uk
Ryan has had a passion for gaming and technology since early childhood. Fusing the skills from his Creative Writing and Publishing degree with profound technical knowledge, he enjoys covering news about Microsoft. As an avid writer, he is also working on his debut novel.

Recent News