#cookies

Security

CSRF in the age of SameSite cookies

Browsers now block many cross-site requests by default. That helps, but it doesn't make CSRF tokens obsolete.

Samuel Brandt · September 26, 2025 · 2 min read