Every check ยท Cookies
SameSite cookies
What it checks
Whether each cookie the home page sets has SameSite.
Why it matters
SameSite says when a cookie may follow a request from another site, the main defence against cross-site request forgery.
How to fix it
- Add SameSite=Lax to each cookie, or Strict where it never needs to follow a link from elsewhere.
Check a site for this and everything else: snag.page. More on cookies: Secure cookies HttpOnly session cookies