SameSite

A cookie attribute that tells the browser not to send the cookie with requests from other sites, blunting CSRF.

Learn it hands-on