OWASP on Vivian's Bloghttps://vvnblog.com/en/tags/owasp/Recent content in OWASP on Vivian's BlogHugo -- gohugo.ioenCopyright © 2026 Vivian All Rights Reserved.Thu, 23 May 2024 00:00:00 +0000Secure, HttpOnly, SameSite: The Three Guardians of Your Cookiehttps://vvnblog.com/en/posts/cookie/Thu, 23 May 2024 00:00:00 +0000https://vvnblog.com/en/posts/cookie/One badly set cookie is enough for an attacker to pretend to be you. Meet the three lines of defense (Secure, HttpOnly, SameSite) and how to turn them on.