@kamataryo/sandbox-same-site-cookies
v1.0.2
Published
An instant server to try the SameSite cookie attribute.
Readme
@kamataryo/sandbox-same-site-cookies
This is an instant server to try SameSite=Strict|Lax|None cookies.
** CAUTION ** This program requires privilege to run. Be aware what you are doing and execute with on your lisk.
usage
You can try with:
$ sudo npx @kamataryo/sandbox-same-site-cookies
# or
$ git clone [email protected]:kamataryo/sandbox-same-site-cookies.git
$ cd sandbox-same-site-cookies
$ sudo npm startThen open http://strict.test.

Q&A
Q: Why is
sudorequired?A: This command edit the
/etc/hoststo use multiple local domains. See bin.sh for details.Q: How can I try
SameSite?A:
- login at http://strict.test/login first
- Move to http://stirict.test with
GETand you will see a login header - Move to http://none.test with
GET - Move to http://strict.test with
GETagain and you will miss the login header, i.e. the cookie is not used - login at http://lax.test/login next
- Move to http://lax.test with
GETand you will see the login header - Move to http://none.test with
GET - Move to http://lax.test with
GETagain and you will see the login header again, i.e. the cookie is used - However, if you use
POSTto move, you will miss the login header, i.e. the cookie is not used
