Cross-site request forgery: Difference between revisions

Content deleted Content added
Rescuing 3 sources and tagging 0 as dead.) #IABot (v2.0.9.5) (Whoop whoop pull up - 14704
Citation bot (talk | contribs)
Add: date. | Use this bot. Report bugs. | Suggested by Whoop whoop pull up | #UCB_webform 21/43
Line 139:
===SameSite cookie attribute===
 
An additional "SameSite" attribute can be included when the server sets a cookie, instructing the browser on whether to attach the cookie to cross-site requests. If this attribute is set to "strict", then the cookie will only be sent on same-site requests, making CSRF ineffective. However, this requires the browser to recognise and correctly implement the attribute.<ref>{{cite web|url=https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies#SameSite_cookies|title=SameSite cookies|date=10 April 2023 |publisher=Mozilla}}</ref>
 
===Client-side safeguards===