medium10 pts · first answer countscookiescsrf

When SameSite=Lax cookies are sent

Your session cookie uses SameSite=Lax. A user is on another website. In which case does the browser send your session cookie?

A.The user clicks a normal link on that site that navigates to your siteB.That site submits a hidden form that POSTs to your siteC.That site calls your API using fetch with credentials: "include" set on the requestD.That site loads an image from your domain

Discussion 0

Join free to post in the discussion.

When SameSite=Lax cookies are sent

Discussion 0

Related questions