wrong description about SameSite: None

[yin1999]

MDN URL

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie/SameSite

What specific section or headline is this issue about?

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie/SameSite#none

What information was incorrect, unhelpful, or incomplete?

The description is: Cookies will be sent in all contexts, i.e. in responses to both first-party and cross-origin requests, but I think it should be cross-site not cross-origin (the port in origin doesn't matter).

It's about the discussion I'vs made in mdn/translated-content#3096. I've made a test. And found that:

• Strict: the cookie was sent only in first-party, and it will not be sent when we jump into first-party site from a third-party site (only the jump request)
• Lax: the cookie was sent only in first-party, but different with Strict, it will be sent when we jump into first-party site from a third-party site
• None: the cookie was sent when we are in the third-party, when the third-party site has refer some resources (images, etc) that are from the site which owns those cookie.

What did you expect to see?

This description should be Cookies will be sent in all contexts, i.e. in responses to both first-party and cross-site requests

If it's ok, I'd like to deal with this.

Do you have any supporting links, references, or citations?

• https://web.dev/samesite-cookies-explained/
• https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies#define_where_cookies_are_sent

Do you have anything more you want to share?

No response

MDN metadata

Page report details

• Folder: en-us/web/http/headers/set-cookie/samesite
• MDN URL: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie/SameSite
• GitHub URL: https://github.com/mdn/content/blob/main/files/en-us/web/http/headers/set-cookie/samesite/index.md
• Last commit: 303a6c3
• Document last modified: 2022-02-18T09:30:25.000Z

[sideshowbarker]

If it's ok, I'd like to deal with this.

Yes, please