Ross Miller

@jvosloo I think what @kiennguyen is getting at is just extending the cookie interface to allow us to set the SameSite attribute just like we can currently set other cookie...

That is an interesting choice. I would think that not setting it all would be best default since that is the current behavior and it mimics things like expiration and...

Also not a committer, however I don't think this is a simple path forward. Play uses the [Cookie interface](https://netty.io/4.1/api/index.html) from Netty to set cookies as seen in the [PlayHandler.java](https://github.com/playframework/play1/blob/master/framework/src/play/server/PlayHandler.java#L365). As...