SameSite cookies, source:web.devSameSite Cookies the new cookie attribute that everyone is talking about, it can be used to prevent SOP bypasses and CSRF attacks. but first let's look what is it actually. SameSite is a cookie attribute which you can tell the browser to when it should send the specific cookie in a cross origin request, it has 3 types: SameSite None Will be sent in all cross origin
![Bypass SameSite Cookies Default to Lax and get CSRF](https://cdn-ak-scissors.b.st-hatena.com/image/square/af71b4cedf0ae14f0a0ff923a108f3008f767b49/height=288;version=1;width=512/https%3A%2F%2Fmiro.medium.com%2Fv2%2Fresize%3Afit%3A1200%2F1%2A8UZt_AZ5AtjLDDh8tseuzA.png)