fix(incompatible): improve incompatible cookie security (#66)

DaniilDem · dandemchenko · web-flow · commit b750b31780e5 · 2026-05-14T15:20:08.000+02:00
Co-authored-by: dandemchenko &lt;dandemchenko@yandex-team.ru&gt;
diff --git a/src/plugins/incompatible-warning/index.ts b/src/plugins/incompatible-warning/index.ts
@@ -277,7 +277,8 @@ function getInlineScript(): string {
 
         if (button) {
             button.addEventListener('click', function() {
-                document.cookie = '${INCOMPATIBLE_COOKIE}=1; max-age=${INCOMPATIBLE_COOKIE_EXPIRED}; path=/';
+                var secure = location.protocol === 'https:' ? '; Secure' : '';
+                document.cookie = '${INCOMPATIBLE_COOKIE}=1; max-age=${INCOMPATIBLE_COOKIE_EXPIRED}; path=/; SameSite=Lax' + secure;
                 window.location.reload();
             });
         }

Original file line number	Diff line number	Diff line change
`@@ -277,7 +277,8 @@ function getInlineScript(): string {`
`277`	`277`
`278`	`278`	`if (button) {`
`279`	`279`	`button.addEventListener('click', function() {`
`280`		`- document.cookie = '${INCOMPATIBLE_COOKIE}=1; max-age=${INCOMPATIBLE_COOKIE_EXPIRED}; path=/';`
	`280`	`+ var secure = location.protocol === 'https:' ? '; Secure' : '';`
	`281`	`+ document.cookie = '${INCOMPATIBLE_COOKIE}=1; max-age=${INCOMPATIBLE_COOKIE_EXPIRED}; path=/; SameSite=Lax' + secure;`
`281`	`282`	`window.location.reload();`
`282`	`283`	`});`
`283`	`284`	`}`