Poisoned Pipeline / Mitigations / M1881

M1881

Enable SameSite cookies

Same-Site cookies are designed to restrict the transmission of cookies to only the same origin (i.e., the same domain and protocol) as the original website.
This can help prevent CSRF attacks by ensuring that cookies are not sent to malicious websites.

Applies to

• T0188 Cross Site Request Forgery

References

• https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie
• https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html