LegacySameSiteCookieBehaviorEnabled

Enable default legacy SameSite cookie behavior setting.

If this policy is set to true, it reverts all cookies to legacy SameSite behavior which means that cookies that don't explicitly specify a SameSite attribute are treated as if they were SameSite=None.

Values

• Set to true to treat cookies with no SameSite attribute as SameSite=None.
• Set to false to treat them as SameSite=Lax.

The policy sets the default behavior rather than locking it, so a user can still change it.

Examples

policies.json

{
  "policies": {
    "LegacySameSiteCookieBehaviorEnabled": true
  }
}

JSON schema

LegacySameSiteCookieBehaviorEnabled JSON schema

{
  "type": "boolean"
}

Windows (GPO)

Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabled = 0x1 | 0x0

macOS

<dict>
  <key>LegacySameSiteCookieBehaviorEnabled</key>
  <true/> | <false/>
</dict>

Compatibility

Firefox	Firefox ESR	Firefox Enterprise
Available since 7676	Available since 7878	Available since 149149

CCK2 Equivalent: N/A
OMA-URI: LegacySameSiteCookieBehaviorEnabled
Preferences Affected: network.cookie.sameSite.laxByDefault