Skip to content

Glossary: Application and Credential Attacks, and AI Risks

SameSite

Also written: SameSite cookie

A cookie setting that tells the browser not to send the cookie with requests started by other sites, which blocks CSRF.

Where the book teaches it

Related terms

cookiecross-site request forgery (CSRF)anti-CSRF token