Subject: [httpwg/http-extensions] Lax same-site cookies should allow <a target="_blank"> (#226)

From: HTTP issue updates <[email-masked]>
Date: Mon, 15 Aug 2016 11:59:39 -0700

Unless I'm misreading the spec, it seems like lax same-site cookies will only be sent for top-level browsing contexts. `<a href="…" target="_blank">` creates an auxiliary context.

As far as I know, the initiator doesn't get any additional information from a `_blank` link, so this restriction seems unnecessary.

+@mikewest 

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/httpwg/http-extensions/issues/226