Is CA Performance Center (CAPC) SameSite cookie setting Lax, Strict or None?

Products

• CA Performance Management - Usage and Administration

Issue/Introduction

What is the SameSite attribute of the Set-Cookie HTTP response header in CA Performance Center (CAPC) web page set to?

Environment

DX NetOps CA Performance Management 20.2.x

Resolution

The default for SameSite is Lax, so we currently don't set the value.This is not something that can be set via Custom Headers, as it's part of the actual cookie:

 

Set-Cookie: flavor=choco; SameSite=Lax

This is the default as per:

Mozilla Developer - SameSite cookies

So in CAPC, it will be Lax by default.