Skip to content

Glossary: Endpoint and Application Security

SameSite

Also written: SameSite=Lax, SameSite=Strict

A cookie flag that stops the cookie being sent with requests started by other sites' forms, which blocks CSRF.

Where the book teaches it

Related terms

Secure cookieCSRF (cross-site request forgery)HttpOnly