Tag
http-state
- Apr 24, 2026 Cookie Scoping, SameSite, and the Site Boundary How cookies are addressed by host and path rather than of origin, what SameSite Lax and Strict actually permit, and where domain-scoped cookies leak across unrelated applications. web platform
- Jan 13, 2023 Cookie Scope and the Attributes That Restrict Sending How the Domain and Path attributes decide which requests carry a cookie, and how Secure, HttpOnly, and expiry constrain what can be done with it once stored. web platform