Users running a non-download version of Vanilla (pulled from github), on branch release/2019.016 or master from the last 2 weeks should upgrade to release/2019.017 or latest master for security reasons. Downloaded official open sources releases are not affected.

Twitter embeds stopped working - cross site cookie issue?

When I first started a new 3.3 forum a couple of weeks ago twitter embeds were working fine, whether from just typing in the URL and pressing enter or using the embed button. Now for some unknown reason, they don't.

Other embeds seem to be working still, just not twitter. They simply appear blank.

The console log in Chrome shows a cross site cookie issue

A cookie associated with a cross-site resource at http://twitter.com/ was set without the `SameSite` attribute. A future release of Chrome will only deliver cookies with cross-site requests if they are set with `SameSite=None` and `Secure`. You can review cookies in developer tools under Application>Storage>Cookies and see more details at https://www.chromestatus.com/feature/5088147346030592 and https://www.chromestatus.com/feature/5633521622188032.

Which I looked up, and it seems this was implemented recently in Chrome, but also already implemented in other browsers.

Is this something I can fix, or a Vanilla team fix?

Comments

Sign In or Register to comment.