Comment Comment by steffenweber The conclusion of this discussion seems to be that "SameSite" cookies should be used to help preventing CSRF.https://www.igvita.com/2016/08/26/stop-cross-site-timing-att... parent steffenweber 9 years ago
https://www.igvita.com/2016/08/26/stop-cross-site-timing-att...