Dealing with some CSRF attacks using the SameSite cookies
Keeping our tokens in cookies can have significant advantages over using the Web Storage API. If we use the HttpOnly attribute, we can’t access the cookies through JavaScript. That means that any malicious code won’t be able to do that too. In the above scenario, we assume that the browser automatically sends the cookies when […]