diff --git a/fedcm/support/accounts_check_same_site_strict.py b/fedcm/support/accounts_check_same_site_strict.py index 27a5d6a5b3e393..7bab26d3e9b8ea 100644 --- a/fedcm/support/accounts_check_same_site_strict.py +++ b/fedcm/support/accounts_check_same_site_strict.py @@ -7,6 +7,7 @@ def main(request, response): return request_error if request.cookies.get(b"same_site_strict") == b"1": return (546, [], "Should not send SameSite=Strict cookies") + # TODO(crbug.com/350944661): We want to send these cookies. if request.cookies.get(b"same_site_lax") == b"1": return (547, [], "Should not send SameSite=Lax cookies") if request.headers.get(b"Sec-Fetch-Site") != b"cross-site": diff --git a/fedcm/support/token_check_same_site_strict.py b/fedcm/support/token_check_same_site_strict.py index f030b9b6fd5365..20bdc594877626 100644 --- a/fedcm/support/token_check_same_site_strict.py +++ b/fedcm/support/token_check_same_site_strict.py @@ -7,6 +7,7 @@ def main(request, response): return request_error if request.cookies.get(b"same_site_strict") == b"1": return (546, [], "Should not send SameSite=Strict cookies") + # TODO(crbug.com/350944661): We want to send these cookies. if request.cookies.get(b"same_site_lax") == b"1": return (547, [], "Should not send SameSite=Lax cookies")