1. 'SameSite' cookie attribute

    Same-site cookies ("First-Party-Only" or "First-Party") allow servers to mitigate the risk of CSRF and information leakage attacks by asserting that a particular cookie should only be sent with requests initiated from the same registrable domain.

  2. headers http header: set-cookie: `samesite`: `samesite=lax`

  3. headers http header: set-cookie: `samesite`: defaults to `lax`

  4. headers http header: set-cookie: `samesite`: `samesite=none`

  5. headers http header: set-cookie: `samesite`: url scheme-aware ("schemeful")

  6. headers http header: set-cookie: `samesite`: secure context required

  7. headers http header: set-cookie: `samesite`: `samesite=strict`