Перейти к содержимому

SameSite Cookie Attribute Explained by Example (Strict, Lax, None & No SameSite)

Hussein Nasser

0:00 / 0:00

SameSite Cookie Attribute Explained by Example (Strict, Lax, None & No SameSite)

81 550 просмотров · 6 лет назад
Hussein Nasser
518 тыс. подписчиков
81 550 просмотров · 6 лет назад
The recent version of Chrome has broke some workflows with samesite cookies. So a few weeks ago I made a video discussing the samesite Attribute change in chrome and how it is a great change that will end CSRF. It looks like Chrome 80 is officially out now and websites are broken or stuck in infinite loops. This is because Cookies without samesite Attribute are treated as samesite lax which means cookies will not be sent except if it is a GET request and top-level navigation clicking on a link 0:00 Intro 1:10 SameSite=Strict 6:00 SameSite=Lax 8:00 SameSite=None 11:00 No SameSite Attribute Source Code https://github.com/hnasr/javascript_p... 🏭 Software Architecture Videos    • Software Architecture   💾 Database Engineering Videos    • Database Engineering   🛰 Network Engineering Videos    • Network Engineering   🏰 Load Balancing and Proxies Videos    • Proxies   🐘 Postgres Videos    • PostgresSQL   🚢Docker    • Docker   🧮 Programming Pattern Videos    • Programming Patterns   🛡 Web Security Videos    • Web Security   🦠 HTTP Videos    • HTTP   🐍 Python Videos    • Python by Example   🔆 Javascript Videos    • Javascript by Example   👾Discord Server   / discord   Support me on PayPal https://bit.ly/33ENps4 Become a Patreon   / hnasr   Stay Awesome, Hussein