All challenges
Multiple ChoiceIntermediate 30s

SameSite cookies

Choose the best answer for: CSRF protection
Options
  1. 1SameSite=None sends cookies on cross-site requests without restriction
  2. 2SameSite=Strict/Lax prevents CSRF by blocking cross-site cookies
  3. 3No SameSite attribute set, so browsers apply their own lax default
  4. 4No cookies issued, which disables sessions and their protections

Think you can answer under pressure?

Get matched and answer live questions in 3-minute 1v1 battles. Elo ranking, badge tiers and bragging rights on the line.

Play this in a 3-minute battle