title: socket.io sets cross-site cookie without same-site attribute
body: <p>I have a socket.io application and recently I got this warning:</p>
  
  <blockquote>
    <p>A cookie associated with a cross-site resource at <em>URL</em> was set
    without the <code>SameSite</code> attribute. 
        A future release of Chrome will only deliver cookies with cross-site requests if they are set with <code>SameSite=None</code> and <code>Secure</code>.</p>
    
    <p>You can review cookies in developer tools under
    Application>Storage>Cookies and see more details at
    <a href="https://www.chromestatus.com/feature/5088147346030592" rel="noreferrer">https://www.chromestatus.com/feature/5088147346030592</a> and
    <a href="https://www.chromestatus.com/feature/5633521622188032" rel="noreferrer">https://www.chromestatus.com/feature/5633521622188032</a>.`</p>
  </blockquote>
  
  <p>Apparently it is something that Chrome will be updating in the future:
  <a href="https://stackoverflow.com/questions/58270663/samesite-warning-chrome-77">SameSite warning Chrome 77</a></p>
  
  <p>I already tried <a href="https://github.com/socketio/socket.io/issues/2276" rel="noreferrer">this</a> but to no apparent avail : <code>io = io.listen(server, { cookie: false });</code></p>
  
  <p>I think the cookie doesn't do anything, so how can I disable io from setting it?</p>