Glossary: Redis and Caching

HttpOnly, Secure, SameSite

Also written: HttpOnly, Secure, SameSite, SameSite=Lax

Cookie settings that keep a session cookie safe. `HttpOnly` hides it from page scripts, `Secure` sends it only over HTTPS, and `SameSite=Lax` keeps it off most requests that start on other sites.