SameSite Cookies
web.dev has a very insightful article on SameSite cookies. Read it to understand how they work.
Value | Intended Use | Example |
SameSite=Lax | Functionality affecting the display of the site. Includes first request. | Theme switcher |
SameSite=Strict | Relating to actions the user initiates. From second request. | Password change |
SameSite=None | Functionality affecting the embedding of the site content. Cookies with SameSite=None must also specify Secure, meaning they require a secure context. |
Watch it later button |
- | Legacy. Cookies without a SameSite attribute will be treated as SameSite=Lax. |
- |