OWASPASVS 5.0 requirement
ASVS-V3.3.2 Each cookie's 'samesite' attribute value is set according to the purpose of the cookie, to limit exposure to user interface redress attacks…
- Standard
- OWASP ASVS 5.0
- Chapter
- V3 Web Frontend Security
- Section
- V3.3 Cookie Setup
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that each cookie's 'SameSite' attribute value is set according to the purpose of the cookie, to limit exposure to user interface redress attacks and browser-based request forgery attacks, commonly known as cross-site request forgery (CSRF).