HttpResponse::setCookie

protected function setCookie(WebCookie $cookie)
{
	if ($cookie->getSpread() & WebCookie::SPREAD_DOMAIN)
	{
		$params = [
			'expires' => $cookie->getExpires(),
			'path' => $cookie->getPath(),
			'domain' => $cookie->getDomain(),
			'secure' => $cookie->getSecure(),
			'httponly' => $cookie->getHttpOnly(),
		];

		if (($sameSite = $cookie->getSameSite()) !== null)
		{
			$params['samesite'] = $sameSite;
		}

		setcookie(
			$cookie->getName(),
			$cookie->getValue(),
			$params
		);
	}

	return $this;
}