(security) implications of cookie nc_sameSiteCookiestrict

What is the use of the cookie nc_sameSiteCookiestrict?

to work around this bug: https://github.com/nextcloud/user_saml/issues/248 , I fake this cookie in every request via webserver configuration. What am i breaking by doing this :slight_smile: ?

I think it might be worse to read the following article to understand for what purpose the mentioned cookie is used: https://www.sjoerdlangkemper.nl/2016/04/14/preventing-csrf-with-samesite-cookie-attribute/