ritou/same-site-cookie-tester.md

## same-site-cookie-tester.md

      
    Raw
  

              same-site-cookie-tester.md
            
          
    $ curl -i "https://same-site-cookie-tester.gigalixirapp.com/set_cookie"
HTTP/2 302 
server: nginx/1.17.7
date: Mon, 24 Aug 2020 01:36:18 GMT
content-type: text/html; charset=utf-8
content-length: 67
cache-control: max-age=0, private, must-revalidate
cross-origin-window-policy: deny
location: /
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-request-id: eb3d58c1e5abe9b6ce2bfd3edf1a368c
x-xss-protection: 1; mode=block
set-cookie: SS_Lax=SameSite_Lax+secure_true; path=/; secure; HttpOnly; SameSite=Lax
set-cookie: SS_Lax_wo_secure=SameSite_Lax+secure_false; path=/; HttpOnly; SameSite=Lax
set-cookie: SS_None=SameSite_None+secure_true; path=/; secure; HttpOnly; SameSite=None
set-cookie: SS_None_wo_secure=SameSite_None+secure_false; path=/; HttpOnly; SameSite=None
set-cookie: SS_Strict=SameSite_Strict+Secure_true; path=/; secure; HttpOnly; SameSite=Strict
set-cookie: SS_Strict_wo_secure=SameSite_Strict+Secure_false; path=/; HttpOnly; SameSite=Strict
via: 1.1 google
alt-svc: clear

<html><body>You are being <a href="/">redirected</a>.</body></html>