Question
carelon
IN
Last activity: 22 Apr 2020 17:26 EDT
How to Enable samesite cookie attribute in PegaV8.1?
Can anyone help me on how to "Enable samesite cookie attribute" in Pega Version 8.1
I have read an article to set this through the below path which was in 8.3, But i did not find this option in 8.1 version.
System > Settings > Cross-Site Request Forgery landing page
https://community.pega.com/support/support-articles/pegachat-does-not-work-csrf-samesitelax
***Edited by Moderator Marissa to update Product and Version****
Pegasystems Inc.
IN
Hi Lokesh,
There is a visible when condition(pzCanManageCSRFSettings) on the Cross-site Request Forgery setting which checks for pxSecurityAdmin privilege. Can you please check this privilege for your operator?
-Rakshith.
Updated: 5 Feb 2020 15:33 EST
Pegasystems Inc.
US
The Samesite cookie attribute is not implemented until the 8.3 versions It is added to the CSRF settings page starting from 8.3 onwards.
I am unsure adding this cookie flag from a load balancer or web server would help.
Pegasystems Inc.
IN
Hello Sunil,
To enable same configuration in Pega 8.1
Can you please create a DSS as below then restart the server.
Purpose: security/csrf/samesitecookieattributevalue Owning Ruleset: Pega-Engine Value: none
Regards,
Praveen