Timeline for Why wouldn't a site's cookies be sent in this scenario?
Current License: CC BY-SA 4.0
5 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Dec 20, 2023 at 22:59 | comment | added | browsermator | Because someone set the "tutorials_shown" cookie to same-site: strict. Since this isn't anything that needs to be secure, they should have set it as same-site: none. If the cookie authenticates the user, and is set same-site: strict, then typing in the URL, using a bookmark, or clicking a link from google would not send that cookie. (Further action would be needed to login to the site... though the site itself could then trigger a call that would send it... ex: using an ajax call that gets the user... now that call is same-site and same-origin, and cookie is sent) | |
| Dec 20, 2023 at 1:32 | vote | accept | Richie Thomas | ||
| Dec 19, 2023 at 23:58 | answer | added | CBHacking | timeline score: 3 | |
| S Dec 19, 2023 at 22:48 | review | First questions | |||
| Dec 20, 2023 at 1:34 | |||||
| S Dec 19, 2023 at 22:48 | history | asked | Richie Thomas | CC BY-SA 4.0 |