Skip to main content

SameSite Cookies

web.dev has a very insightful article on SameSite cookies. Read it to understand how they work.

ValueIntended UseExample
SameSite=LaxFunctionality affecting the display of the site. Includes first request.Theme switcher
SameSite=StrictRelating to actions the user initiates. From second request.Password change
SameSite=NoneFunctionality affecting the embedding of the site content.
Cookies with SameSite=None must also specify Secure, meaning they require a secure context.
Watch it later button
-Legacy.
Cookies without a SameSite attribute will be treated as SameSite=Lax.

-