Toggle Theme Light

---

SameSite Wiki

Stable

Attacks, Vulnerabilities and Security Risks

This section lists XS attacks, vulnerabilities and security risks that (i) are not protected by SameSite cookies, or (ii) are protected but attackers can bypass it due to the outlined vulnerabilities.

---

Table of contents

• CSRF
• XS-Leaks
• Privacy
• Policy Bypass
• Policy Downgrade
• Cookie-less Attacks

---