Full threadfloatboth·> Cookie Policy: Same-Site=lax by defaultLET'S GOOOOOThe day web developers forget about stupid "csrf protection tokens" is coming \o/View on HN