SameSite cookie + StatCounter (in Chrome)

**Paul&John** · 03-20-2020, 02:28 AM

Damn, no one?

Bump

**Paul&John** · 03-22-2020, 05:32 AM

Final bump

**blackmonsters** · 03-22-2020, 06:09 AM

Originally posted by Paul&John

Final bump

Set-Cookie: somecookie=abc123; SameSite=None; Secure

https://web.dev/samesite-cookies-explained/

Now please send $500 Billion to my paypal account; if you have less than $500 Billion then
I will accept 4 rolls of toilet paper and a tomato instead.

**Paul&John** · 03-24-2020, 05:38 AM

Thanks for the reply, but this needs to be edited in the Statcounter code itself which gets provided by them, no?

I mean the cookie set by statcounter is this for example:

Code:

__cfduid=dd67a3df3519a5b4e1585056313; expires=Thu, 23-Apr-20 13:25:13 GMT; path=/; domain=.statcounter.com; HttpOnly; SameSite=Lax

And this is the example code added to the footer

Code:

<script type="text/javascript">
var sc_project=2197334; 
var sc_invisible=0; 
var sc_security="d176e8f6"; 
var scJsHost = "https://";
document.write("<sc"+"ript type='text/javascript' src='" +
scJsHost+
"statcounter.com/counter/counter.js'></"+"script>");
</script>
<noscript><div class="statcounter"><a title="Web Analytics"
href="https://statcounter.com/" target="_blank"><img
class="statcounter"
src="https://c.statcounter.com/2197334/0/d176e8f6/0/"
alt="Web Analytics"></a></div></noscript>

so they need to add that SameSite=none; Secure part into the .js ( statcounter.com/counter/counter.js ) , right? I cant overwrite it on my end from Lax to None?

**blackmonsters** · 03-24-2020, 06:43 AM

Originally posted by Paul&John

Thanks for the reply, but this needs to be edited in the Statcounter code itself which gets provided by them, no?

I mean the cookie set by statcounter is this for example:

Code:

__cfduid=dd67a3df3519a5b4e1585056313; expires=Thu, 23-Apr-20 13:25:13 GMT; path=/; domain=.statcounter.com; HttpOnly; SameSite=Lax

And this is the example code added to the footer

Code:

<script type="text/javascript">
var sc_project=2197334; 
var sc_invisible=0; 
var sc_security="d176e8f6"; 
var scJsHost = "https://";
document.write("<sc"+"ript type='text/javascript' src='" +
scJsHost+
"statcounter.com/counter/counter.js'></"+"script>");
</script>
<noscript><div class="statcounter"><a title="Web Analytics"
href="https://statcounter.com/" target="_blank"><img
class="statcounter"
src="https://c.statcounter.com/2197334/0/d176e8f6/0/"
alt="Web Analytics"></a></div></noscript>

so they need to add that SameSite=none; Secure part into the .js ( statcounter.com/counter/counter.js ) , right? I cant overwrite it on my end from Lax to None?

Yes.

You can't do anything about another site's cookie.
They have to fix it on their end.

Now quit stalling on the toilet paper, I will no longer accept $500 Billion.

**Paul&John** · 03-24-2020, 07:02 AM

Ok thats what I thought, pretty male from their end

**blackmonsters** · 03-24-2020, 07:07 AM

Originally posted by Paul&John

Ok thats what I thought, pretty male from their end

Send my toilet paper!

SameSite cookie + StatCounter (in Chrome)

SameSite cookie + StatCounter (in Chrome)

Comment

Comment

Comment

Comment

Comment

Comment

Comment