Cookies
SameSite cookies and CSRF: what None, Lax and Strict really do
SameSite is one word on your cookie that decides whether the browser sends it on requests coming from other sites. Get it wrong and you open the door to CSRF.
Tag
SameSite is one word on your cookie that decides whether the browser sends it on requests coming from other sites. Get it wrong and you open the door to CSRF.
A session cookie is the key to a logged-in account. Three small flags decide whether that key is protected or up for grabs. Here is the five-minute version.