samesite

A PHP library aiming to make the use of browser security features more accessible.

Module for Nginx which allows to set the flags "HttpOnly", "secure" and "SameSite" for cookies.

Modern cookie management for PHP

ASP.NET Core Blazor BFF with Microsoft Entra ID and Razor page

支持跨站cookie共享的chrome插件，支持chrome>94版本；chrome-extension:Allow your cookies without samesite

SameSite Cookies Wiki

Web-Security(Web 安全)

WSGI Middleware to preserve compatibility regarding cookies with the SameSite attribute

Provides support for legacy clients when using SameSite=None cookies in Laravel 5.8+

A simple utility to detect incompatible user agents for `SameSite=None` cookie attribute

Explore and learn about Cross-Origin Resource Sharing (CORS) vulnerabilities with our interactive CORS-vulnerable Lab. Ideal for security enthusiasts and developers.

Interactive SameSite, Secure, and Partitioned cookie debugger for cross-site web flows.

Go library to detect if SameSite=None cookies are supported. This code is an implementation of https://www.chromium.org/updates/same-site/incompatible-clients

Lint Set-Cookie headers for security locally — missing HttpOnly/Secure/SameSite, SameSite=None without Secure, over-broad Domain, and __Host-/__Secure- prefix violations that make browsers silently drop your cookie. Deterministic CLI, JSON/MD reports.

Proof of concept iOS app demonstrating how to serve a local (embedded) website in WKWebView, while also being able to make cross-origin remote AJAX calls and handle cookies without worrying about Same-Site restrictions.

Provides a middleware to automatically set the correct SameSite and Secure attribute for cookies if the client and request supports it.

Cookie Doctor: why your cookie is not set or not sent (SameSite, Secure, Domain, localhost, cross-site). Free, client-side.

SilverStripe 4.8 Composer installable patch to add SameSite Cookie - PR 9920 silverstripe/framework

Audit cookie policy docs for inventory, Secure/HttpOnly/SameSite, prefixes, domain/path scope, expiry, consent, CSRF/auth flows, third-party cookies, deletion, examples, tests, and ownership.

A Keycloak SPI plugin that dynamically rewrites SameSite cookie attributes to SameSite=None; Secure for specific clients running inside an iframe.