CS Fundamentals Trainer · JavaScript · Security

Right after login, app.example sets three cookies: a=1; SameSite=Lax, b=1; SameSite=Strict and c=1 (no SameSite attribute). Ten seconds…

Right after login, `app.example` sets three cookies: `a=1; SameSite=Lax`, `b=1; SameSite=Strict` and `c=1` (no SameSite attribute). Ten seconds later a page on `evil.example` auto-submits a `<form method="POST">` to `app.example`. Which cookies does Chromium attach?

  1. `a` and `c`
  2. `c` only
  3. None of them
  4. `a`, `b` and `c`

Difficulty: hard

Answer this question

Related questions